CVE-2022-21778

In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06382421; Issue ID: ALPS06382421.

• CWE-125
• CWE-125

• https://corp.mediatek.com/product-security-bulletin/November-2022Vendor Advisory
• https://corp.mediatek.com/product-security-bulletin/November-2022Vendor Advisory

Published

Nov 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21772In TEEI driver, there is a possible type confusion due to a …6.7
• CVE-2022-21773In TEEI driver, there is a possible use after free due to a …6.7
• CVE-2022-21774In TEEI driver, there is a possible use after free due to a …6.7
• CVE-2022-21775In sched driver, there is a possible use after free due to i…6.7
• CVE-2022-21776In MDP, there is a possible use after free due to a race con…6.4
• CVE-2022-21777In Autoboot, there is a possible permission bypass due to a …7.8
• CVE-2022-21779In WLAN driver, there is a possible out of bounds write due …6.7
• CVE-2022-2178Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2022-21780In WLAN driver, there is a possible out of bounds write due …6.7
• CVE-2022-21781In WLAN driver, there is a possible out of bounds write due …6.7
• CVE-2022-21782In WLAN driver, there is a possible out of bounds write due …6.7
• CVE-2022-21783In WLAN driver, there is a possible out of bounds write due …6.7