Details of VAR-202210-0376

ID

VAR-202210-0376

CVE

CVE-2022-32591

TITLE

Google of Android Input verification vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2022-018867

DESCRIPTION

In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07257259; Issue ID: ALPS07257259. Google of Android There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. MediaTek Inc. is the world's fourth-largest foundry semiconductor company. It is in a leading position in the markets of mobile terminals, smart home applications, wireless connection technology and Internet of Things products, with approximately 1.5 billion units a year End products with built-in MediaTek chips are available all over the world

Trust: 2.16

sources: NVD: CVE-2022-32591 // JVNDB: JVNDB-2022-018867 // CNVD: CNVD-2022-87959

IOT TAXONOMY

category:

['IoT']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2022-87959

AFFECTED PRODUCTS

vendor:	google	model:	android	scope:	eq	version:	12.0	Trust: 1.8
vendor:	google	model:	android	scope:	eq	version:	11.0	Trust: 1.8
vendor:	google	model:	android	scope:	-	version:	-	Trust: 0.8
vendor:	google	model:	android	scope:	eq	version:	-	Trust: 0.8
vendor:	mediatek	model:	mt6580 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6580 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6739 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6739 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6753 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6753 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6757 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6757 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6761 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6761 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6762 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6762 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6763 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6763 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6765 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6765 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6768 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6768 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6779 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6779 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6781 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6781 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6785 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6785 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6789 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6789 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6833 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6833 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6853 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6853 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6853t android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6853t android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6855 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6855 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6873 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6873 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6875 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6875 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6877 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6877 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6879 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6879 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6885 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6885 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6893 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6893 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6895 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6895 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt6983 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt6983 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8321 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8321 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8385 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8385 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8666 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8666 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8675 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8675 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8765 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8765 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8766 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8766 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8768 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8768 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8786 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8786 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8788 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8788 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8789 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8789 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8791 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8791 android	scope:	eq	version:	12.0	Trust: 0.6
vendor:	mediatek	model:	mt8797 android	scope:	eq	version:	11.0	Trust: 0.6
vendor:	mediatek	model:	mt8797 android	scope:	eq	version:	12.0	Trust: 0.6

sources: CNVD: CNVD-2022-87959 // JVNDB: JVNDB-2022-018867 // NVD: CVE-2022-32591

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2022-32591
value:	HIGH
Trust: 1.0
NVD:	CVE-2022-32591
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2022-87959
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-202210-339
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2022-87959
severity:	MEDIUM
baseScore:	4.9
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2022-32591
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2022-32591
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2022-87959 // JVNDB: JVNDB-2022-018867 // CNNVD: CNNVD-202210-339 // NVD: CVE-2022-32591

PROBLEMTYPE DATA

problemtype:	CWE-20	Trust: 1.0
problemtype:	Inappropriate input confirmation (CWE-20) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2022-018867 // NVD: CVE-2022-32591

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202210-339

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-202210-339

PATCH

title:	Patch for Various MediaTek chip ril denial of service vulnerabilities	url:	https://www.cnvd.org.cn/patchInfo/show/372251	Trust: 0.6
title:	MediaTek Fixes for chip security vulnerabilities	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=209978	Trust: 0.6

sources: CNVD: CNVD-2022-87959 // CNNVD: CNNVD-202210-339

EXTERNAL IDS

db:	NVD	id:	CVE-2022-32591	Trust: 3.8
db:	JVNDB	id:	JVNDB-2022-018867	Trust: 0.8
db:	CNVD	id:	CNVD-2022-87959	Trust: 0.6
db:	CNNVD	id:	CNNVD-202210-339	Trust: 0.6

sources: CNVD: CNVD-2022-87959 // JVNDB: JVNDB-2022-018867 // CNNVD: CNNVD-202210-339 // NVD: CVE-2022-32591

REFERENCES

url:	https://corp.mediatek.com/product-security-bulletin/october-2022	Trust: 3.0
url:	https://nvd.nist.gov/vuln/detail/cve-2022-32591	Trust: 0.8
url:	https://cxsecurity.com/cveshow/cve-2022-32591/	Trust: 0.6

sources: CNVD: CNVD-2022-87959 // JVNDB: JVNDB-2022-018867 // CNNVD: CNNVD-202210-339 // NVD: CVE-2022-32591

SOURCES

db:	CNVD	id:	CNVD-2022-87959
db:	JVNDB	id:	JVNDB-2022-018867
db:	CNNVD	id:	CNNVD-202210-339
db:	NVD	id:	CVE-2022-32591

LAST UPDATE DATE

2024-08-14T14:37:16.936000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2022-87959	date:	2022-12-15T00:00:00
db:	JVNDB	id:	JVNDB-2022-018867	date:	2023-10-23T08:14:00
db:	CNNVD	id:	CNNVD-202210-339	date:	2022-10-13T00:00:00
db:	NVD	id:	CVE-2022-32591	date:	2022-10-12T13:52:41.910

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2022-87959	date:	2022-12-15T00:00:00
db:	JVNDB	id:	JVNDB-2022-018867	date:	2023-10-23T00:00:00
db:	CNNVD	id:	CNNVD-202210-339	date:	2022-10-07T00:00:00
db:	NVD	id:	CVE-2022-32591	date:	2022-10-07T20:15:14.823