PT-2023-13104 · Mediatek · Mtk-Isp

Published 2023-01-03 · Updated 2025-04-10 · CVE-2022-32650

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mtk-isp (affected versions not specified)

Description The issue is related to a logic error in mtk-isp, which could lead to a use after free scenario. This could result in local escalation of privilege, requiring System execution privileges. No user interaction is needed for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-131

Related Identifiers

CVE-2022-32650

Affected Products

Mtk-Isp

References · 7

• https://corp.mediatek.com/product-security-bulletin/January-2023 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-32650 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32650 · Security Note
• https://t.me/cibsecurity/55831 · Telegram Post
• https://t.me/cvenotify/118707 · Telegram Post
• https://t.me/cvenotify/41221 · Telegram Post
• https://t.me/cvenotify/41668 · Telegram Post