CVE-2022-21745: Use After Free

Published Jun 6, 2022

Updated

In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation of privilege, when devices are connecting to the attacker-controllable Wi-Fi hotspot, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06468872; Issue ID: ALPS06468872.

Affected Software

47 affected components

Google Android

Google Android=10.0

Google Android=11.0

Google Android=12.0

MediaTek Mt6761

MediaTek Mt6762

MediaTek Mt6765

MediaTek Mt6768

MediaTek Mt6769

MediaTek Mt6779

MediaTek Mt6781

MediaTek Mt6785

MediaTek Mt6789

MediaTek Mt6833

MediaTek Mt6853

MediaTek Mt6853t

MediaTek Mt6873

MediaTek Mt6875

MediaTek Mt6877

MediaTek Mt6879

MediaTek Mt6883

MediaTek Mt6885

MediaTek Mt6889

MediaTek Mt6891

MediaTek Mt6893

MediaTek Mt6895

MediaTek Mt6983

MediaTek Mt6985

MediaTek Mt8167s

MediaTek Mt8168

MediaTek Mt8175

MediaTek Mt8183

MediaTek Mt8185

MediaTek Mt8362a

MediaTek Mt8365

MediaTek Mt8385

MediaTek Mt8667

MediaTek Mt8675

MediaTek Mt8695

MediaTek Mt8696

MediaTek Mt8766

MediaTek Mt8768

MediaTek Mt8786

MediaTek Mt8788

MediaTek Mt8789

MediaTek Mt8791

MediaTek Mt8797

Event History

Jun 6, 2022

CVE Published

via Android·12:00 AM

CVE Published

via MITRE·05:29 PM

Data Sourced

via MITRE·05:29 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2022-21745?

CVE-2022-21745 is a vulnerability in WIFI Firmware that can lead to remote escalation of privilege.

How does CVE-2022-21745 occur?

CVE-2022-21745 occurs due to a memory corruption issue caused by a use after free vulnerability.

How severe is CVE-2022-21745?

CVE-2022-21745 has a severity rating of 8.8 (high).

Which devices are affected by CVE-2022-21745?

Devices running Google Android versions 10.0, 11.0, and 12.0 are affected by CVE-2022-21745.

How can I fix CVE-2022-21745?

To fix CVE-2022-21745, apply the security patches and updates provided by the vendor.