CVE-2022-25479

EUVD-2022-30149
Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows for the leakage of kernel memory from both the stack and the heap.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
realtekrtsper
𝑥
< 10.0.22000.21355
realtekrtsuer
𝑥
< 10.0.22000.31274
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
realtekrtsper_pcie_card_reader_driver
𝑥
< 10.0.22000.21355
ADP
realtekrtsper_usb_card_reader_driver
𝑥
< 10.0.22000.31274
ADP
Common Weakness Enumeration
References
http://realtek.com
https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a
https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf
https://zwclose.github.io/2024/10/14/rtsper1.html
http://realtek.com
https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a
https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf