CVE-2022-32665

CRITICAL 9.8CVE-2022-32665 · Published 03/01/2023 · updated 17/06/2026

In short

CVE-2022-32665 is a CRITICAL (CVSS 9.8) vulnerability affecting linkit software development kit (mediatek).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.6% of all vulnerabilities.
Fix: update to tlb7.3.258.100-p1-1555 or later.

Package	Affected versions	Patched versions
linkit software development kit mediatek	`< tlb7.3.258.100-p1-1555`	`tlb7.3.258.100-p1-1555`

Description

In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124.

References

corp.mediatek.com/product-security-bulletin/January-2023 · Vendor Advisory

CVE-2022-32665

In short

Description

References

More vulnerabilities in linkit software development kit

CVE-2022-32665

In short

Description

References

More vulnerabilities in linkit software development kit