CVE-2024-25392

An out-of-bounds access occurs in utilities/var_export/var_export.c in RT-Thread through 5.0.2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.9 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
mitreCNA
---
---
CISA-ADPADP
5.9 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 8%
VendorProductVersion
rt-threadrt-thread
𝑥
≤ 5.0.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2024/03/05/1
https://github.com/RT-Thread/rt-thread/issues/8290
https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
https://seclists.org/fulldisclosure/2024/Mar/28
https://security.humanativaspa.it/multiple-vulnerabilities-in-rt-thread-rtos/
http://www.openwall.com/lists/oss-security/2024/03/05/1
https://github.com/RT-Thread/rt-thread/issues/8290
https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
https://seclists.org/fulldisclosure/2024/Mar/28
https://security.humanativaspa.it/multiple-vulnerabilities-in-rt-thread-rtos/