CVE-2022-32597

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446228; Issue ID: ALPS07446228.

• CWE-787
• CWE-787

• https://corp.mediatek.com/product-security-bulletin/December-2022Vendor Advisory
• https://corp.mediatek.com/product-security-bulletin/December-2022Vendor Advisory

Published

Dec 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-32591In ril, there is a possible system crash due to an incorrect…7.5
• CVE-2022-32592In cpu dvfs, there is a possible out of bounds write due to …6.7
• CVE-2022-32593In vowe, there is a possible out of bounds write due to a mi…6.7
• CVE-2022-32594In widevine, there is a possible out of bounds write due to …6.7
• CVE-2022-32595In widevine, there is a possible out of bounds read due to a…4.4
• CVE-2022-32596In widevine, there is a possible out of bounds write due to …6.7
• CVE-2022-32598In widevine, there is a possible out of bounds write due to …6.7
• CVE-2022-32599In rpmb, there is a possible out of bounds write due to a lo…6.7
• CVE-2022-3260The response header has not enabled X-FRAME-OPTIONS, Which h…4.8
• CVE-2022-32601In telephony, there is a possible permission bypass due to a…7.8
• CVE-2022-32602In keyinstall, there is a possible out of bounds read due to…5.5
• CVE-2022-32603In gpu drm, there is a possible out of bounds write due to i…6.7