CVE-2022-26447

CVE	CVE-2022-26447
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-09-06 18:15:00 UTC
Updated	2023-08-08 14:21:00 UTC
Description	In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06784478; Issue ID: ALPS06784478.

Problem Types: CWE-787

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Google	Android	10.0	All	All	All
Operating System	Google	Android	11.0	All	All	All
Operating System	Google	Android	12.0	All	All	All
Hardware	Mediatek	Mt6580	-	All	All	All
Hardware	Mediatek	Mt6735	-	All	All	All
Hardware	Mediatek	Mt6737	-	All	All	All
Hardware	Mediatek	Mt6739	-	All	All	All
Hardware	Mediatek	Mt6750s	-	All	All	All
Hardware	Mediatek	Mt6753	-	All	All	All
Hardware	Mediatek	Mt6755s	-	All	All	All
Hardware	Mediatek	Mt6757	-	All	All	All
Hardware	Mediatek	Mt6757c	-	All	All	All
Hardware	Mediatek	Mt6757cd	-	All	All	All
Hardware	Mediatek	Mt6757ch	-	All	All	All
Hardware	Mediatek	Mt6763	-	All	All	All
Hardware	Mediatek	Mt6771	-	All	All	All
Hardware	Mediatek	Mt8163	-	All	All	All
Hardware	Mediatek	Mt8167	-	All	All	All
Hardware	Mediatek	Mt8167s	-	All	All	All
Hardware	Mediatek	Mt8173	-	All	All	All
Hardware	Mediatek	Mt8183	-	All	All	All
Hardware	Mediatek	Mt8321	-	All	All	All
Hardware	Mediatek	Mt8362a	-	All	All	All
Hardware	Mediatek	Mt8385	-	All	All	All
Hardware	Mediatek	Mt8518	-	All	All	All
Hardware	Mediatek	Mt8532	-	All	All	All
Hardware	Mediatek	Mt8765	-	All	All	All
Hardware	Mediatek	Mt8788	-	All	All	All
Operating System	Yoctoproject	Yocto	3.1	All	All	All

Reference	Source	Link	Tags
September 2022	MISC	corp.mediatek.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.