Skip to content
OpenAdvisories
Medium · 6.7 CVE-2022-32650 EUVD-2022-35716GHSA-qxpm-28pq-9xpq

In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution…

Published Jan 3, 2023 · Updated Apr 10, 2025 · Assigned by MediaTek

Description

In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225853; Issue ID: ALPS07225853.

Affected products

VendorProductAffectedFixed
MediaTek MT6879, MT6895, MT6983 Android 12.0, 13.0 —

References