CVE:CVE-2022-26475
CNNVD:CNNVD-202210-346
MediaTek 芯片是中国联发科（MediaTek）公司的MediaTek 的多款芯片。
MediaTek 芯片存在缓冲区错误漏洞，该漏洞源于在 wlan中，缺少边界检查，攻击者利用该漏洞可以本地权限升级，以下产品和版本受到影响：MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6853, MT6855, MT6873, MT6875, MT6879, MT6883, MT6885, MT6889, MT6895, MT6983, MT7663, MT7902, MT7921, MT8167S, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8512A, MT8518, MT8532, MT8667, MT8695, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789。
solution:Upgrade google android to a higher version than 11.0,12.0,and avoid the version 11.0,12.0; Upgrade linuxfoundation yocto to a higher version than 3.1,3.3,and avoid the version 3.1,3.3