CVE-2022-21770
CVE-2022-21770
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Jul 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In sound driver, there is a possible information disclosure due to symlink following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558663; Issue ID: ALPS06558663.
Affected products
MediaTek, Inc. · MT6781, MT6877, MT6879, MT6893, MT6895, MT6983, MT8791, MT8797, MT8798Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →