Lucene search

MitreCVE-2022-25479

HistoryJul 02, 2024 - 7:15 p.m.

CVE-2022-25479

2024-07-0219:15:11

CWE-401

mitre

web.nvd.nist.gov

realtek

rtsper

rtsuer

card reader

vulnerability

kernel memory

stack

heap

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.0%

JSON

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows for the leakage of kernel memory from both the stack and the heap.

Affected configurations

Nvd

Node

realtekrtsperRange<10.0.22000.21355

realtekrtsuerRange<10.0.22000.31274

VendorProductVersionCPE
realtekrtsper*cpe:2.3:a:realtek:rtsper:*:*:*:*:*:*:*:*
realtekrtsuer*cpe:2.3:a:realtek:rtsuer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realtek	rtsper	*	cpe:2.3:a:realtek:rtsper::::::::
realtek	rtsuer	*	cpe:2.3:a:realtek:rtsuer::::::::

References

realtek.com

gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a

www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.0%

JSON

Related for CVE-2022-25479