Realtek SD Card Reader Driver Security Update

🗓️ 24 Sep 2025 00:00:00Reported by HP Product Security Response TeamType

hp🔗 support.hp.com👁 5 Views

Realtek SD card reader driver updates mitigate privilege escalation and information disclosure.

Reporter	Title	Published	Views	Family All 60
GithubExploit	Exploit for Missing Release of Memory after Effective Lifetime in Realtek Rtsper	17 Sep 202406:28	–	githubexploit
ATTACKERKB	CVE-2022-25478	2 Jul 202419:15	–	attackerkb
ATTACKERKB	CVE-2022-25479	2 Jul 202419:15	–	attackerkb
ATTACKERKB	CVE-2022-25477	2 Jul 202419:15	–	attackerkb
BDU FSTEC	The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers relates to writing beyond the buffer boundaries in memory. This allows an attacker to write data into the kernel memory beyond the boundaries of the system buffer.	1 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers involves writing beyond the buffer boundaries in memory, allowing an attacker to perform writes at arbitrary kernel addresses.	1 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers arises from writing beyond the buffer boundaries in memory. This allows an attacker to write data into the kernel memory beyond the system buffer IRP.	1 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers, related to memory release errors, allows an attacker to gain access to the kernel’s stack memory and dynamic memory.	1 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers is related to insufficient validation of input data. This allows attackers to gain access to read and write data in the PCI configuration space.	1 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers is related to insufficient protection of registration data. This allows attackers to access the driver logs.	1 Nov 202400:00	–	bdu_fstec

Vulners

Node

hp hp_pro_x360_435_13.3_inch_g10_notebook_pc_firmwareRange<10.0.26100.21377

OR

hp hp_pro_x360_435_13.3_inch_g9_notebook_pc_firmwareRange<10.0.26100.21377

OR

hp hp_probook_430_g8_firmwareRange<10.0.26100.21377

OR

hp hp_probook_440_g8_firmwareRange<10.0.26100.21377

OR

hp hp_probook_445_g7_firmwareRange<10.0.26100.21377

OR

hp hp_probook_445_g8_firmwareRange<10.0.26100.21377

OR

hp hp_probook_445r_g6_firmwareRange<10.0.26100.21377

OR

hp hp_probook_450_g8_firmwareRange<10.0.26100.21377

OR

hp hp_probook_455_g7_firmwareRange<10.0.26100.21377

OR

hp hp_probook_455_g8_firmwareRange<10.0.26100.21377

OR

hp hp_probook_455r_g6_firmwareRange<10.0.26100.21377

OR

hp hp_probook_x360_11_g4_ee_firmwareRange<10.0.26100.21377

OR

hp hp_probook_x360_435_g7_firmwareRange<10.0.26100.21377

OR

hp hp_probook_x360_435_g8_notebook_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_15_g6_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_17_g6_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_create_g7_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_fury_15_g7_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_fury_15.6_inch_g8_mobile_workstation_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_fury_16_g10_mobile_workstation_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_fury_16_g9_mobile_workstation_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_fury_17_g7_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_fury_17.3_inch_g8_mobile_workstation_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_fury_g11_mobile_workstation_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_power_16_inch_g11_a_mobile_workstation_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_power_16_inch_g11_mobile_workstation_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_studio_15.6_inch_g8_mobile_workstation_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_studio_16_inch_g10_mobile_workstation_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_studio_16_inch_g11_mobile_workstation_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_studio_16_inch_g9_mobile_workstation_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_studio_g5_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_studio_g7_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_studio_x360_g5_firmwareRange<10.0.26100.21377

OR

hp hp_zbook_x2_g4_firmwareRange<10.0.26100.21377

OR

hp hp_zhan_66_pro_14_g4_notebook_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zhan_66_pro_a_14_g3_firmwareRange<10.0.26100.21377

OR

hp hp_zhan_66_pro_a_14_g4_notebook_pc_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_800_g4_23.8-in_healthcare_edition_all-in-one_business_pc_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_800_g4_23.8-inch_non-touch_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_800_g4_23.8-inch_non-touch_gpu_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_800_g4_23.8-inch_touch_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_800_g4_23.8-inch_touch_gpu_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_800_g5_23.8-in_healthcare_edition_all-in-one_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_800_g5_23.8-inch_all-in-one_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_800_g6_24_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_800_g6_27_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_800_g8_24_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_800_g8_27_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_840_23.8_inch_g9_all-in-one_desktop_pc_firmwareRange<10.0.26100.21377

OR

hp hp_eliteone_870_27_inch_g9_all-in-one_desktop_pc_firmwareRange<10.0.26100.21377

OR

hp hp_presence_24_all-in-one_with_zoom_rooms_firmwareRange<10.0.26100.21377

OR

hp hp_presence_27_all-in-one_with_zoom_rooms_firmwareRange<10.0.26100.21377

OR

hp hp_proone_400_g5_20-inch_all-in-one_business_pc_firmwareRange<10.0.26100.21377

OR

hp hp_proone_400_g5_23.8-inch_all-in-one_business_pc_firmwareRange<10.0.26100.21377

OR

hp hp_proone_400_g6_20_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_proone_400_g6_24_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_proone_440_g5_23.8-in_all-in-one_business_pc_firmwareRange<10.0.26100.21377

OR

hp hp_proone_440_g6_24_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_proone_600_g5_21.5-in_all-in-one_business_pc_firmwareRange<10.0.26100.21377

OR

hp hp_proone_600_g6_22_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zhan_66_pro_g3_22_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zhan_66_pro_g3_24_all-in-one_pc_firmwareRange<10.0.26100.21377

OR

hp hp_zhan_99_pro_23.8_inch_g9_all-in-one_desktop_pc_firmwareRange<10.0.26100.21377

OR

hp hp_14-dq2xxx_firmwareRange<10.0.26100.31287

OR

hp 14t-dq200_firmwareRange<10.0.26100.31287

OR

hp hp_14-dq3xxx_firmwareRange<10.0.26100.31287

OR

hp 14t-dq300_firmwareRange<10.0.26100.31287

OR

hp hp_14-dq4xxx_firmwareRange<10.0.26100.31287

OR

hp 14t-dq400_firmwareRange<10.0.26100.31287

OR

hp hp_14-dq5xxx_firmwareRange<10.0.26100.31287

OR

hp 14t-dq500_firmwareRange<10.0.26100.31287

OR

hp hp_14-dq6xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dq2xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dq3xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dq4xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dq5xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dq6xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dr2xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dr3xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dr4xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dr5xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dr6xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dy2xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dy3xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dy4xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dy5xxx_firmwareRange<10.0.26100.31287

OR

hp hp_14s-dy6xxx_firmwareRange<10.0.26100.31287

25 Sep 2025 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.8 - 8.8

EPSS0.01269

SSVC

realtek sd card reader driver update privilege escalation information disclosure security mitigation hp computers