Skip to content
OpenAdvisories
Unscored CVE-2022-20083 EUVD-2022-25343GHSA-w5h3-hfjg-f58j

In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when dec…

Published Jul 6, 2022 · Updated Aug 3, 2024 · Assigned by MediaTek

Vendor: MediaTek Product: MT2731, MT2735, MT6297, MT6725, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6755, MT6757, MT6757P, MT6758, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, M

Description

In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00803883; Issue ID: MOLY00803883.

Affected products

VendorProductAffectedFixed
MediaTek MT2731, MT2735, MT6297, MT6725, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6755, MT6757, MT6757P, MT6758, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, M Modem LR9, LR11, LR12, LR12A, LR13, NR15, NR16 —

References