CVE-2022-26446
Summary
| CVE | CVE-2022-26446 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-11-08 21:15:00 UTC |
| Updated | 2022-11-09 18:05:00 UTC |
| Description | In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 (CMAS message), with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883; Issue ID: ALPS07274118. |
Risk And Classification
Problem Types: CWE-617
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Mediatek | Lr12a | - | All | All | All |
| Operating System | Mediatek | Lr13 | - | All | All | All |
| Hardware | Mediatek | Mt2731 | - | All | All | All |
| Hardware | Mediatek | Mt2735 | - | All | All | All |
| Hardware | Mediatek | Mt6297 | - | All | All | All |
| Hardware | Mediatek | Mt6725 | - | All | All | All |
| Hardware | Mediatek | Mt6739 | - | All | All | All |
| Hardware | Mediatek | Mt6761 | - | All | All | All |
| Hardware | Mediatek | Mt6762 | - | All | All | All |
| Hardware | Mediatek | Mt6762d | - | All | All | All |
| Hardware | Mediatek | Mt6762m | - | All | All | All |
| Hardware | Mediatek | Mt6763 | - | All | All | All |
| Hardware | Mediatek | Mt6765 | - | All | All | All |
| Hardware | Mediatek | Mt6765t | - | All | All | All |
| Hardware | Mediatek | Mt6767 | - | All | All | All |
| Hardware | Mediatek | Mt6768 | - | All | All | All |
| Hardware | Mediatek | Mt6769 | - | All | All | All |
| Hardware | Mediatek | Mt6769t | - | All | All | All |
| Hardware | Mediatek | Mt6769z | - | All | All | All |
| Hardware | Mediatek | Mt6771 | - | All | All | All |
| Hardware | Mediatek | Mt6779 | - | All | All | All |
| Hardware | Mediatek | Mt6781 | - | All | All | All |
| Hardware | Mediatek | Mt6783 | - | All | All | All |
| Hardware | Mediatek | Mt6785 | - | All | All | All |
| Hardware | Mediatek | Mt6785t | - | All | All | All |
| Hardware | Mediatek | Mt6789 | - | All | All | All |
| Hardware | Mediatek | Mt6833 | - | All | All | All |
| Hardware | Mediatek | Mt6853 | - | All | All | All |
| Hardware | Mediatek | Mt6855 | - | All | All | All |
| Hardware | Mediatek | Mt6873 | - | All | All | All |
| Hardware | Mediatek | Mt6875 | - | All | All | All |
| Hardware | Mediatek | Mt6877 | - | All | All | All |
| Hardware | Mediatek | Mt6879 | - | All | All | All |
| Hardware | Mediatek | Mt6880 | - | All | All | All |
| Hardware | Mediatek | Mt6883 | - | All | All | All |
| Hardware | Mediatek | Mt6885 | - | All | All | All |
| Hardware | Mediatek | Mt6889 | - | All | All | All |
| Hardware | Mediatek | Mt6890 | - | All | All | All |
| Hardware | Mediatek | Mt6891 | - | All | All | All |
| Hardware | Mediatek | Mt6893 | - | All | All | All |
| Hardware | Mediatek | Mt6895 | - | All | All | All |
| Hardware | Mediatek | Mt6983 | - | All | All | All |
| Hardware | Mediatek | Mt8385 | - | All | All | All |
| Hardware | Mediatek | Mt8666 | - | All | All | All |
| Hardware | Mediatek | Mt8667 | - | All | All | All |
| Hardware | Mediatek | Mt8675 | - | All | All | All |
| Hardware | Mediatek | Mt8765 | - | All | All | All |
| Hardware | Mediatek | Mt8766 | - | All | All | All |
| Hardware | Mediatek | Mt8768 | - | All | All | All |
| Hardware | Mediatek | Mt8786 | - | All | All | All |
| Hardware | Mediatek | Mt8788 | - | All | All | All |
| Hardware | Mediatek | Mt8789 | - | All | All | All |
| Hardware | Mediatek | Mt8791 | - | All | All | All |
| Hardware | Mediatek | Mt8797 | - | All | All | All |
| Operating System | Mediatek | Nr15 | - | All | All | All |
| Operating System | Mediatek | Nr16 | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| November 2022 | MISC | corp.mediatek.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.