In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203476; Issue ID: ALPS07203476.
                
            References
                    | Link | Resource | 
|---|---|
| https://corp.mediatek.com/product-security-bulletin/November-2022 | Vendor Advisory | 
| https://corp.mediatek.com/product-security-bulletin/November-2022 | Vendor Advisory | 
Configurations
                    Configuration 1 (hide)
| AND | 
            
            
 
  | 
    
History
                    21 Nov 2024, 07:06
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () https://corp.mediatek.com/product-security-bulletin/November-2022 - Vendor Advisory | 
Information
                Published : 2022-11-08 21:15
Updated : 2025-05-01 20:15
NVD link : CVE-2022-32610
Mitre link : CVE-2022-32610
CVE.ORG link : CVE-2022-32610
JSON object : View
Products Affected
                mediatek
- mt8789
 - mt6855
 - mt8797
 - mt6779
 - mt8791
 - mt6781
 - mt6895
 - mt6873
 - mt8786
 - mt6762
 - mt6875
 - mt6893
 - mt8365
 - mt6983
 - mt6768
 - mt6785
 - mt6883
 - mt6877
 - mt6891
 - mt8768
 - mt6833
 - mt8798
 - mt6853
 - mt6853t
 - mt6789
 - mt8696
 - mt6885
 - mt8185
 - mt6769
 - mt6879
 - mt6889
 - mt8168
 
- android
 
CWE
                
                    
                        
                        CWE-662
                        
            Improper Synchronization
