VDB
CNVD-2022-66250
CNVD-2022-66250
PUBLISHED
CVSS 9.300000190734863 CRITICAL
联发科技股份有限公司(MediaTek Inc.)是全球第四大晶圆厂半导体公司,在移动终端、智能家居应用、无线连接技术及物联网产品等市场位居领先地位,一年约有15亿台内建MediaTek芯片的终端产品在全球各地上市。 多款MediaTek芯片Modem 2G RR存在越界写入漏洞,该漏洞源于在Modem 2G RR缺少边界检查,攻击者可利用该漏洞进行远程代码执行。
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cnvd | MediaTek MT6779 LR13 | |
| cnvd | MediaTek MT6739 LR12 | |
| cnvd | MediaTek MT8765 LR11 | |
| MediaTek MT6758 LR13 | ||
| cnvd | MediaTek MT8786 LR12 | |
| MediaTek MT6879 LR12 | ||
| cnvd | MediaTek MT8766 LR13 | |
| MediaTek MT6763 LR11 | ||
| cnvd | MediaTek MT6297 NR16 | |
| cnvd | MediaTek MT8771 LR9 | |
| MediaTek MT6879 LR9 | ||
| cnvd | MediaTek MT8797 LR11 | |
| cnvd | MediaTek MT6769Z LR11 | |
| MediaTek MT8789 LR12A | ||
| cnvd | MediaTek MT6783 NR16 | |
| cnvd | MediaTek MT6757P LR9 | |
| cnvd | MediaTek MT6889 LR11 | |
| MediaTek MT6757 LR9 | ||
| MediaTek MT6765T NR16 | ||
| cnvd | MediaTek MT8781 LR9 |
…and 904 more
Timeline
- Jul 8, 2022 CVE ID Reserved
- Jul 8, 2022 CVE Updated
- Sep 29, 2022 CVE Published