CVE-2022-32657 Privilege escalation in MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986

Medium 6.7 Published 3 Jan 2023 Updated 10 Apr 2025

Local attackers with system privileges can exploit incorrect error handling in MediaTek Wi-Fi drivers to escalate privileges.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-32657?

CVE-2022-32657 is a medium-severity vulnerability in MediaTek, Inc. MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986, published on 3 Jan 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705042; Issue ID: GN20220705042.

Weakness: CWE-755

Which versions are affected by CVE-2022-32657?

It affects 10 products.

Products include Mediatek Mt7603 Firmware, Mediatek Mt7613 Firmware, Mediatek Mt7615 Firmware, Mediatek Mt7622 Firmware, Mediatek Mt7628 Firmware, Mediatek Mt7629 Firmware and 4 more.

How do I fix CVE-2022-32657?

No fix has been published for CVE-2022-32657 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-32657 being exploited?

There is no known exploitation of CVE-2022-32657 in the wild and no public exploit code.

Sources

Also known as GHSA-3wp9-gvwq-96mc.