CVE-2022-21753: Medium severity android vulnerability

Published Jun 6, 2022

Updated

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06493873; Issue ID: ALPS06493899.

Affected Software

41 affected components

Google Android=11.0

Google Android=12.0

MediaTek Mt6580

MediaTek Mt6735

MediaTek Mt6739

MediaTek Mt6761

MediaTek Mt6765

MediaTek Mt6768

MediaTek Mt6771

MediaTek Mt6779

MediaTek Mt6781

MediaTek Mt6785

MediaTek Mt6833

MediaTek Mt6853

MediaTek Mt6873

MediaTek Mt6877

MediaTek Mt6879

MediaTek Mt6883

MediaTek Mt6885

MediaTek Mt6889

MediaTek Mt6893

MediaTek Mt6895

MediaTek Mt6983

MediaTek Mt8167s

MediaTek Mt8168

MediaTek Mt8175

MediaTek Mt8183

MediaTek Mt8185

MediaTek Mt8362a

MediaTek Mt8365

MediaTek Mt8385

MediaTek Mt8667

MediaTek Mt8675

MediaTek Mt8695

MediaTek Mt8696

MediaTek Mt8766

MediaTek Mt8768

MediaTek Mt8786

MediaTek Mt8788

MediaTek Mt8789

MediaTek Mt8797

Event History

Jun 6, 2022

CVE Published

via MITRE·05:38 PM

Data Sourced

via MITRE·05:38 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2022-21753?

CVE-2022-21753 is a vulnerability in the WLAN driver that allows for a possible out-of-bounds write, leading to local escalation of privilege.

What is the severity of CVE-2022-21753?

CVE-2022-21753 has a severity rating of medium with a CVSS score of 6.7.

How does CVE-2022-21753 impact Android 11.0 and 12.0?

CVE-2022-21753 affects Android 11.0 and 12.0, potentially allowing for local privilege escalation.

Is Mediatek Mt6580 affected by CVE-2022-21753?

No, Mediatek Mt6580 is not vulnerable to CVE-2022-21753.

How can I patch CVE-2022-21753?

To patch CVE-2022-21753, apply the provided patch ALPS06493873 or refer to the official Mediatek Product Security Bulletin for more information.