CVE-2022-20083
9.8
CRITICAL · CVSS 3.1 · EPSS 2.8% (pctl 86)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00803883; Issue ID: MOLY00803883.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.75% — more likely to be exploited than 86% of all CVEs |
| Weakness | CWE-787 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2022-07-06 |
| Last modified | 2026-06-17 |
Affected (40)
| Vendor | Product |
|---|---|
| mediatek | lr11 |
| mediatek | lr12 |
| mediatek | lr12a |
| mediatek | lr13 |
| mediatek | lr9 |
| mediatek | mt2731 |
| mediatek | mt2735 |
| mediatek | mt6297 |
| mediatek | mt6725 |
| mediatek | mt6735 |
| mediatek | mt6737 |
| mediatek | mt6739 |
| mediatek | mt6750 |
| mediatek | mt6750s |
| mediatek | mt6755 |
| mediatek | mt6757 |
| mediatek | mt6757p |
| mediatek | mt6758 |
| mediatek | mt6761 |
| mediatek | mt6762 |
| mediatek | mt6762d |
| mediatek | mt6762m |
| mediatek | mt6763 |
| mediatek | mt6765 |
| mediatek | mt6765t |
| mediatek | mt6767 |
| mediatek | mt6768 |
| mediatek | mt6769 |
| mediatek | mt6769t |
| mediatek | mt6769z |
| mediatek | mt6771 |
| mediatek | mt6775 |
| mediatek | mt6779 |
| mediatek | mt6781 |
| mediatek | mt6783 |
| mediatek | mt6785 |
| mediatek | mt6785t |
| mediatek | mt6789 |
| mediatek | nr15 |
| mediatek | nr16 |
References
→ the Explorer · watch your stack · NVD