{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-24T05:33:17.163","vulnerabilities":[{"cve":{"id":"CVE-2022-26437","sourceIdentifier":"security@mediatek.com","published":"2022-08-01T14:15:09.493","lastModified":"2026-06-17T04:35:11.743","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In httpclient, there is a possible out of bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WSAP00103831; Issue ID: WSAP00103831."},{"lang":"es","value":"En httpclient, se presenta una posible escritura fuera de límites debido a datos no inicializados. Esto podría conllevar a una escalada remota de privilegios sin necesidad de privilegios de ejecución adicionales. No es requerida una interacción del usuario para su explotación. ID del Parche: WSAP00103831; ID de Incidencia: WSAP00103831"}],"affected":[{"source":"security@mediatek.com","affectedData":[{"vendor":"MediaTek, Inc.","product":"MT2621, MT2625","versions":[{"version":"NBIOT SDK V2.8.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediatek:nbiot_sdk:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"3A839D4B-4B20-4663-A018-63F6CF6D840B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt2621:-:*:*:*:*:*:*:*","matchCriteriaId":"D22D1E86-2AD6-4B60-9E87-C309F928C579"},{"vulnerable":false,"criteria":"cpe:2.3:h:mediatek:mt2625:-:*:*:*:*:*:*:*","matchCriteriaId":"DF1AF8D8-F68E-4697-9E7A-8CDA6899F643"}]}]}],"references":[{"url":"https://corp.mediatek.com/product-security-bulletin/August-2022","source":"security@mediatek.com","tags":["Vendor Advisory"]},{"url":"https://corp.mediatek.com/product-security-bulletin/August-2022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}