In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System…

Description

In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494477; Issue ID: ALPS07494477.

Scores

EPSS (exploitation in 30 days)

0.10% · top 99% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.1.

Weakness

• Information Disclosure
• CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (opens in a new tab)All about CWE-362 and its CVEs
• CWE-662 (opens in a new tab)All about CWE-662 and its CVEs

Affected products

• MediaTek, Inc. · MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6891, MT6893, MT6895, MT6983, MT8781, MT8791, MT8791T, MT8797

  • affected Android 11.0, 12.0, 13.0

References (1)

• https://corp.mediatek.com/product-security-bulletin/January-2023 (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2022-32645](https://trackcve.app/badge/CVE-2022-32645.svg)](https://trackcve.app/cve/CVE-2022-32645)

Record last updated 10 Apr 2025, 16:02 UTC.