CVE-2022-26439: MediaTek MT7603 Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420020; Issue ID: GN20220420020.

Affected products

• MediaTek MT7603 Firmware: version 7.6.2.3 only
• MediaTek MT7610 Firmware: version 7.6.2.3 only
• MediaTek MT7612 Firmware: version 7.6.2.3 only
• MediaTek MT7613 Firmware: version 7.6.2.3 only
• MediaTek MT7615 Firmware: version 7.6.2.3 only
• MediaTek MT7620 Firmware: version 7.6.2.3 only
• MediaTek MT7622 Firmware: version 7.6.2.3 only
• MediaTek MT7628 Firmware: version 7.6.2.3 only
• MediaTek MT7629 Firmware: version 7.6.2.3 only
• MediaTek MT7915 Firmware: version 7.6.2.3 only
• MediaTek MT7916 Firmware: version 7.6.2.3 only
• MediaTek MT7986 Firmware: version 7.6.2.3 only
• MediaTek MT8981 Firmware: version 7.6.2.3 only

Published 2022-08-01. Last modified 2026-06-17.