{"id":"CVE-2022-32655","aliases":["EUVD-2022-35721","GHSA-3m2q-3qhr-66rq"],"status":"published","title":"In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This...","description":"In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00312,"percentile":0.2424,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-755"],"published":"2023-02-06T00:00:00Z","modified":"2026-06-17T04:47:47Z","products":[{"vendor":"mediatek","product":"mt5221_firmware"},{"vendor":"mediatek","product":"mt7603_firmware"},{"vendor":"mediatek","product":"mt7613_firmware"},{"vendor":"mediatek","product":"mt7615_firmware"},{"vendor":"mediatek","product":"mt7622_firmware"},{"vendor":"mediatek","product":"mt7628_firmware"},{"vendor":"mediatek","product":"mt7629_firmware"},{"vendor":"mediatek","product":"mt7663_firmware"},{"vendor":"mediatek","product":"mt7668_firmware"},{"vendor":"mediatek","product":"mt7682_firmware"},{"vendor":"mediatek","product":"mt7686_firmware"},{"vendor":"mediatek","product":"mt7687_firmware"},{"vendor":"mediatek","product":"mt7697_firmware"},{"vendor":"mediatek","product":"mt7902_firmware"},{"vendor":"mediatek","product":"mt7915_firmware"},{"vendor":"mediatek","product":"mt7916_firmware"},{"vendor":"mediatek","product":"mt7921_firmware"},{"vendor":"mediatek","product":"mt7933_firmware"},{"vendor":"mediatek","product":"mt7981_firmware"},{"vendor":"mediatek","product":"mt7986_firmware"},{"vendor":"mediatek","product":"mt8167s_firmware"},{"vendor":"mediatek","product":"mt8175_firmware"},{"vendor":"mediatek","product":"mt8362a_firmware"},{"vendor":"mediatek","product":"mt8365_firmware"},{"vendor":"mediatek","product":"mt8385_firmware"},{"vendor":"mediatek","product":"mt8518s_firmware"},{"vendor":"mediatek","product":"mt8532_firmware"},{"vendor":"mediatek","product":"mt8695_firmware"},{"vendor":"mediatek","product":"mt8696_firmware"},{"vendor":"mediatek","product":"mt8788_firmware"},{"vendor":"mediatek, inc.","product":"mt5221, mt7603, mt7613, mt7615, mt7622, mt7628, mt7629, mt7663, mt7668, mt7682, mt7686, mt7687, mt7697, mt7902, mt7915, mt7916, mt7921, mt7933, mt7981, mt7986, mt8167s, mt8175, mt8362a, mt8365, mt8385, mt8518s, mt8532, mt8695, mt8696, mt8788"}],"references":[{"url":"https://corp.mediatek.com/product-security-bulletin/February-2023","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32655"},{"url":"https://github.com/advisories/GHSA-3m2q-3qhr-66rq"}],"sources":{"cve":[{"id":"CVE-2022-32655","description":"In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028.","status":"published","published":"2023-02-06T00:00:00Z","modified":"2025-03-26T20:04:32.709Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:34:36.917505Z"}],"euvd":[{"id":"EUVD-2022-35721","description":"In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028.","status":"published","published":"2023-02-06T00:00:00Z","modified":"2025-03-26T20:04:32Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T20:52:50.381676Z"}],"ghsa":[{"id":"GHSA-3m2q-3qhr-66rq","title":"In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This...","description":"In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028.","status":"published","published":"2023-02-06T21:30:30Z","modified":"2025-03-26T21:30:51Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-20","CWE-755"],"updated_at":"2026-11-02T15:00:28.149554Z"}],"nvd":[{"id":"CVE-2022-32655","description":"In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028.","status":"published","published":"2023-02-06T20:15:11.107Z","modified":"2026-06-17T04:47:47.573Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:07:36.026349Z"}]}}