CVE-2022-32637

MEDIUM

6.7

CVSS Score

Published: January 3, 2023 at 12:00 AM UTC

Updated: June 17, 2026 at 04:47 AM UTC

12 products affected across 2 vendorsAndroidMT6885MT6853

Using MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6883, MT6885, MT6889, MT8185, MT8789 by MediaTek, Inc.?

Get instant alerts when new vulnerabilities affect MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6883, MT6885, MT6889, MT8185, MT8789 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.7

Exploit prediction

EPSS 0.1%

SSVC

No known exploit

Description

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Android · Google

95%

10.0 11.0

mediatek-mt6781 (environment) · mediatek-mt6785 (environment) · mediatek-mt6833 (environment) · mediatek-mt6853 (environment) · mediatek-mt6853t (environment) · mediatek-mt6873 (environment) · mediatek-mt6883 (environment) · mediatek-mt6885 (environment) · mediatek-mt6889 (environment) · mediatek-mt8185 (environment) · mediatek-mt8789 (environment)

MT6781 · MediaTekdevice

80%

All versions

MT6785 · MediaTekdevice

80%

All versions

MT6833 · MediaTekdevice

80%

All versions

MT6853 · MediaTekdevice

80%

All versions