Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-32602 EUVD-2022-35668GHSA-g333-g9g8-m3x9

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with n…

Published Nov 8, 2022 · Updated May 1, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT6833, MT6883, MT6983, MT8183, MT8185, MT8321, MT8385, MT8675, MT8765, MT8766, MT8768, MT8786, MT8789, MT8791, MT8791T, MT8797

Description

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388790; Issue ID: ALPS07388790.

Affected products

VendorProductAffectedFixed
MediaTek MT6833, MT6883, MT6983, MT8183, MT8185, MT8321, MT8385, MT8675, MT8765, MT8766, MT8768, MT8786, MT8789, MT8791, MT8791T, MT8797 Android 11.0, 12.0 —

Advisories 1

References