Skip to content
OpenAdvisories
Medium · 6.7 CVE-2022-32637 EUVD-2022-35703GHSA-gq48-j7w4-j44w

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi…

Published Jan 3, 2023 · Updated Apr 10, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6883, MT6885, MT6889, MT8185, MT8789

Description

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374.

Affected products

VendorProductAffectedFixed
MediaTek MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6883, MT6885, MT6889, MT8185, MT8789 Android 10.0, 11.0 —

Advisories 1

References