Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Realtek SD Card Reader Driver Security Update

🗓️ 24 Sep 2025 00:00:00Reported by HP Product Security Response TeamType 
hp
 hp🔗 support.hp.com👁 13 Views

Realtek SD card reader driver updates mitigate privilege escalation and information disclosure.

Related
Detection
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for Missing Release of Memory after Effective Lifetime in Realtek Rtsper
17 Sep 202406:28
–githubexploit
githubexploit
GithubExploit		Exploit for Insertion of Sensitive Information into Log File in Realtek Rtsper
16 Jul 202604:46
–githubexploit
attackerkb
ATTACKERKB		CVE-2022-25478
2 Jul 202419:15
–attackerkb
attackerkb
ATTACKERKB		CVE-2022-25479
2 Jul 202419:15
–attackerkb
attackerkb
ATTACKERKB		CVE-2022-25477
2 Jul 202419:15
–attackerkb
bdu_fstec
BDU FSTEC		The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers relates to writing beyond the buffer boundaries in memory. This allows an attacker to write data into the kernel memory beyond the boundaries of the system buffer.
1 Nov 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers involves writing beyond the buffer boundaries in memory, allowing an attacker to perform writes at arbitrary kernel addresses.
1 Nov 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers arises from writing beyond the buffer boundaries in memory. This allows an attacker to write data into the kernel memory beyond the system buffer IRP.
1 Nov 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers, related to memory release errors, allows an attacker to gain access to the kernel’s stack memory and dynamic memory.
1 Nov 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers is related to insufficient validation of input data. This allows attackers to gain access to read and write data in the PCI configuration space.
1 Nov 202400:00
–bdu_fstec
Rows per page
Vulners
Node
OR
hphp_pro_x360_435_13.3_inch_g10_notebook_pc_firmwareRange<10.0.26100.21377
hphp_pro_x360_435_13.3_inch_g9_notebook_pc_firmwareRange<10.0.26100.21377
hphp_probook_430_g8_firmwareRange<10.0.26100.21377
hphp_probook_440_g8_firmwareRange<10.0.26100.21377
hphp_probook_445_g7_firmwareRange<10.0.26100.21377
hphp_probook_445_g8_firmwareRange<10.0.26100.21377
hphp_probook_445r_g6_firmwareRange<10.0.26100.21377
hphp_probook_450_g8_firmwareRange<10.0.26100.21377
hphp_probook_455_g7_firmwareRange<10.0.26100.21377
hphp_probook_455_g8_firmwareRange<10.0.26100.21377
hphp_probook_455r_g6_firmwareRange<10.0.26100.21377
hphp_probook_x360_11_g4_ee_firmwareRange<10.0.26100.21377
hphp_probook_x360_435_g7_firmwareRange<10.0.26100.21377
hphp_probook_x360_435_g8_notebook_pc_firmwareRange<10.0.26100.21377
hphp_zbook_15_g6_firmwareRange<10.0.26100.21377
hphp_zbook_17_g6_firmwareRange<10.0.26100.21377
hphp_zbook_create_g7_firmwareRange<10.0.26100.21377
hphp_zbook_fury_15_g7_firmwareRange<10.0.26100.21377
hphp_zbook_fury_15.6_inch_g8_mobile_workstation_pc_firmwareRange<10.0.26100.21377
hphp_zbook_fury_16_g10_mobile_workstation_pc_firmwareRange<10.0.26100.21377
hphp_zbook_fury_16_g9_mobile_workstation_pc_firmwareRange<10.0.26100.21377
hphp_zbook_fury_17_g7_firmwareRange<10.0.26100.21377
hphp_zbook_fury_17.3_inch_g8_mobile_workstation_pc_firmwareRange<10.0.26100.21377
hphp_zbook_fury_g11_mobile_workstation_pc_firmwareRange<10.0.26100.21377
hphp_zbook_power_16_inch_g11_a_mobile_workstation_pc_firmwareRange<10.0.26100.21377
hphp_zbook_power_16_inch_g11_mobile_workstation_pc_firmwareRange<10.0.26100.21377
hphp_zbook_studio_15.6_inch_g8_mobile_workstation_pc_firmwareRange<10.0.26100.21377
hphp_zbook_studio_16_inch_g10_mobile_workstation_pc_firmwareRange<10.0.26100.21377
hphp_zbook_studio_16_inch_g11_mobile_workstation_pc_firmwareRange<10.0.26100.21377
hphp_zbook_studio_16_inch_g9_mobile_workstation_pc_firmwareRange<10.0.26100.21377
hphp_zbook_studio_g5_firmwareRange<10.0.26100.21377
hphp_zbook_studio_g7_firmwareRange<10.0.26100.21377
hphp_zbook_studio_x360_g5_firmwareRange<10.0.26100.21377
hphp_zbook_x2_g4_firmwareRange<10.0.26100.21377
hphp_zhan_66_pro_14_g4_notebook_pc_firmwareRange<10.0.26100.21377
hphp_zhan_66_pro_a_14_g3_firmwareRange<10.0.26100.21377
hphp_zhan_66_pro_a_14_g4_notebook_pc_firmwareRange<10.0.26100.21377
hphp_eliteone_800_g4_23.8-in_healthcare_edition_all-in-one_business_pc_firmwareRange<10.0.26100.21377
hphp_eliteone_800_g4_23.8-inch_non-touch_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_eliteone_800_g4_23.8-inch_non-touch_gpu_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_eliteone_800_g4_23.8-inch_touch_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_eliteone_800_g4_23.8-inch_touch_gpu_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_eliteone_800_g5_23.8-in_healthcare_edition_all-in-one_firmwareRange<10.0.26100.21377
hphp_eliteone_800_g5_23.8-inch_all-in-one_firmwareRange<10.0.26100.21377
hphp_eliteone_800_g6_24_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_eliteone_800_g6_27_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_eliteone_800_g8_24_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_eliteone_800_g8_27_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_eliteone_840_23.8_inch_g9_all-in-one_desktop_pc_firmwareRange<10.0.26100.21377
hphp_eliteone_870_27_inch_g9_all-in-one_desktop_pc_firmwareRange<10.0.26100.21377
hphp_presence_24_all-in-one_with_zoom_rooms_firmwareRange<10.0.26100.21377
hphp_presence_27_all-in-one_with_zoom_rooms_firmwareRange<10.0.26100.21377
hphp_proone_400_g5_20-inch_all-in-one_business_pc_firmwareRange<10.0.26100.21377
hphp_proone_400_g5_23.8-inch_all-in-one_business_pc_firmwareRange<10.0.26100.21377
hphp_proone_400_g6_20_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_proone_400_g6_24_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_proone_440_g5_23.8-in_all-in-one_business_pc_firmwareRange<10.0.26100.21377
hphp_proone_440_g6_24_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_proone_600_g5_21.5-in_all-in-one_business_pc_firmwareRange<10.0.26100.21377
hphp_proone_600_g6_22_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_zhan_66_pro_g3_22_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_zhan_66_pro_g3_24_all-in-one_pc_firmwareRange<10.0.26100.21377
hphp_zhan_99_pro_23.8_inch_g9_all-in-one_desktop_pc_firmwareRange<10.0.26100.21377
hphp_14-dq2xxx_firmwareRange<10.0.26100.31287
hp14t-dq200_firmwareRange<10.0.26100.31287
hphp_14-dq3xxx_firmwareRange<10.0.26100.31287
hp14t-dq300_firmwareRange<10.0.26100.31287
hphp_14-dq4xxx_firmwareRange<10.0.26100.31287
hp14t-dq400_firmwareRange<10.0.26100.31287
hphp_14-dq5xxx_firmwareRange<10.0.26100.31287
hp14t-dq500_firmwareRange<10.0.26100.31287
hphp_14-dq6xxx_firmwareRange<10.0.26100.31287
hphp_14s-dq2xxx_firmwareRange<10.0.26100.31287
hphp_14s-dq3xxx_firmwareRange<10.0.26100.31287
hphp_14s-dq4xxx_firmwareRange<10.0.26100.31287
hphp_14s-dq5xxx_firmwareRange<10.0.26100.31287
hphp_14s-dq6xxx_firmwareRange<10.0.26100.31287
hphp_14s-dr2xxx_firmwareRange<10.0.26100.31287
hphp_14s-dr3xxx_firmwareRange<10.0.26100.31287
hphp_14s-dr4xxx_firmwareRange<10.0.26100.31287
hphp_14s-dr5xxx_firmwareRange<10.0.26100.31287
hphp_14s-dr6xxx_firmwareRange<10.0.26100.31287
hphp_14s-dy2xxx_firmwareRange<10.0.26100.31287
hphp_14s-dy3xxx_firmwareRange<10.0.26100.31287
hphp_14s-dy4xxx_firmwareRange<10.0.26100.31287
hphp_14s-dy5xxx_firmwareRange<10.0.26100.31287
hphp_14s-dy6xxx_firmwareRange<10.0.26100.31287

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
25 Sep 2025 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.17.8 - 8.8
EPSS0.0126
SSVC
realtek sd card readerdriver updateprivilege escalationinformation disclosuresecurity mitigationhp computers
13