CVE-2022-21744

Published Jul 6, 2022 CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed
Description
In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper neighbouring cell size with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00810064; Issue ID: ALPS06641626.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-26908 In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper neighbouring cell size with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00810064; Issue ID: ALPS06641626.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
MediaTek
Published
Updated
Aug 3, 2024, 2:53 AM
Reserved
Nov 26, 2021, 12:00 AM
Status
Modified
Published
Jul 6, 2022, 2:15 PM
Modified
Jun 17, 2026, 4:26 AM