CVE-2022-32659 Privilege escalation in MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986, MT8518S, MT8532

Medium 6.7 Published 3 Jan 2023 Updated 10 Apr 2025

Local attackers with system privileges can escalate privileges via undefined behavior in MediaTek Wi-Fi drivers due to incorrect error handling.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-32659?

CVE-2022-32659 is a medium-severity vulnerability in MediaTek, Inc. MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986, MT8518S, MT8532, published on 3 Jan 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066.

Weakness: CWE-755

Which versions are affected by CVE-2022-32659?

It affects 13 products.

Products include Mediatek Mt7603 Firmware, Mediatek Mt7613 Firmware, Mediatek Mt7615 Firmware, Mediatek Mt7622 Firmware, Mediatek Mt7628 Firmware, Mediatek Mt7629 Firmware and 7 more.

How do I fix CVE-2022-32659?

No fix has been published for CVE-2022-32659 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-32659 being exploited?

There is no known exploitation of CVE-2022-32659 in the wild and no public exploit code.

Sources

Also known as GHSA-f92h-3c3j-gghq.