CVE-2022-32665

In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124.

• CWE-77
• CWE-77

• https://corp.mediatek.com/product-security-bulletin/January-2023Vendor Advisory
• https://corp.mediatek.com/product-security-bulletin/January-2023Vendor Advisory

Published

Jan 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-32657In Wi-Fi driver, there is a possible undefined behavior due …6.7
• CVE-2022-32658In Wi-Fi driver, there is a possible undefined behavior due …6.7
• CVE-2022-32659In Wi-Fi driver, there is a possible undefined behavior due …6.7
• CVE-2022-3266An out-of-bounds read can occur when decoding H264 video. Th…5.5
• CVE-2022-32663In Wi-Fi driver, there is a possible system crash due to nul…7.5
• CVE-2022-32664In Config Manager, there is a possible command injection due…8.8
• CVE-2022-32666In Wi-Fi, there is a possible low throughput due to misrepre…7.5
• CVE-2022-32667Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-32668Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-32669Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-3267Cross-Site Request Forgery (CSRF) in GitHub repository ikus0…4.3
• CVE-2022-32670Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…