VDB
CVE-2022-32618
CVE-2022-32618
PUBLISHED
CVSS 6.800000190734863 MEDIUM
In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262454; Issue ID: ALPS07262454.
EPSS 0.21% · 11.7th percentile
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.21%
11.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| MediaTek, Inc. | MT6833, MT6873, MT6893, MT8798 | Android 11.0, 12.0, 13.0 |
| android | 12.0, 11.0, 13.0 |
Timeline
- Nov 8, 2022 CVE Published
- Nov 9, 2022 EPSS Score
- Nov 13, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 3, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 19, 2023 EPSS Score
- May 1, 2023 EPSS Score
- Jun 13, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Oct 21, 2023 EPSS Score
- Dec 3, 2023 EPSS Score