VDB

CNVD-2022-66250

CNVD-2022-66250 PUBLISHED CVSS 9.300000190734863 CRITICAL

联发科技股份有限公司(MediaTek Inc.)是全球第四大晶圆厂半导体公司,在移动终端、智能家居应用、无线连接技术及物联网产品等市场位居领先地位,一年约有15亿台内建MediaTek芯片的终端产品在全球各地上市。 多款MediaTek芯片Modem 2G RR存在越界写入漏洞,该漏洞源于在Modem 2G RR缺少边界检查,攻击者可利用该漏洞进行远程代码执行。

Risk Scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
cnvdMediaTek MT6779 LR13
cnvdMediaTek MT6739 LR12
cnvdMediaTek MT8765 LR11
MediaTek MT6758 LR13
cnvdMediaTek MT8786 LR12
MediaTek MT6879 LR12
cnvdMediaTek MT8766 LR13
MediaTek MT6763 LR11
cnvdMediaTek MT6297 NR16
cnvdMediaTek MT8771 LR9
MediaTek MT6879 LR9
cnvdMediaTek MT8797 LR11
cnvdMediaTek MT6769Z LR11
MediaTek MT8789 LR12A
cnvdMediaTek MT6783 NR16
cnvdMediaTek MT6757P LR9
cnvdMediaTek MT6889 LR11
MediaTek MT6757 LR9
MediaTek MT6765T NR16
cnvdMediaTek MT8781 LR9

…and 904 more

Timeline

  • Jul 8, 2022 CVE ID Reserved
  • Jul 8, 2022 CVE Updated
  • Sep 29, 2022 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›