CVE-2022-25480

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows writing to kernel memory beyond the SystemBuffer of the IRP.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
VendorProductVersion
realtekrtsper
𝑥
< 10.0.22000.21355
realtekrtsuer
𝑥
< 10.0.22000.31274
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://realtek.com
https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a
https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf
https://zwclose.github.io/2024/10/14/rtsper1.html
http://realtek.com
https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a
https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf