Cyber Resilience

CVE-2022-32656

Medium

Published: 06 February 2023

Published
06 February 2023
Modified
26 March 2025
KEV Added
Patch
CVSS Score v3.1 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0017 37.5th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-32656 is a medium-severity an unspecified weakness vulnerability in Mediatek Mt5221 Firmware. Its CVSS base score is 6.7 (Medium).

Operationally, ranked at the 37.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035.

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

mediatek
mt5221 firmware
7.6.6.0
mediatek
mt7603 firmware
7.6.6.0
mediatek
mt7613 firmware
7.6.6.0
mediatek
mt7615 firmware
7.6.6.0
mediatek
mt7622 firmware
7.6.6.0
mediatek
mt7628 firmware
7.6.6.0
mediatek
mt7629 firmware
7.6.6.0
mediatek
mt7663 firmware
7.6.6.0
mediatek
mt7668 firmware
7.6.6.0
mediatek
mt7682 firmware
7.6.6.0
+20 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References