MediaTek Linkit Software Development Kit vulnerabilities

3 CVEs affecting MediaTek Linkit Software Development Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-32665, published 2023-01-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-32665, published 2023-01-03. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is…
CVE-2021-30636, published 2022-01-24. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and pvPortRealloc.
CVE-2022-32664, published 2023-01-03. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with User execution privileges needed. User interaction is…