Skip to content
OpenAdvisories
Medium · 6.7 CVE-2022-32649 EUVD-2022-35715GHSA-m76m-9c29-9p58

In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution pr…

Published Jan 3, 2023 · Updated Apr 10, 2025 · Assigned by MediaTek

Description

In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225840; Issue ID: ALPS07225840.

Affected products

VendorProductAffectedFixed
MediaTek MT6895, MT6983 Android 12.0 —

References