Skip to content
OpenAdvisories
Medium · 6.4 CVE-2022-32644 EUVD-2022-35710GHSA-5vv4-4cpw-9c7v

In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution …

Published Jan 3, 2023 · Updated Apr 10, 2025 · Assigned by MediaTek

Vendor: MediaTek Product: MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6891, MT6893, MT6895, MT6983, MT8781, MT8791, MT8791T, MT8797

Description

In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494473; Issue ID: ALPS07494473.

Affected products

VendorProductAffectedFixed
MediaTek MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6891, MT6893, MT6895, MT6983, MT8781, MT8791, MT8791T, MT8797 Android 11.0, 12.0, 13.0 —

References