CVE-2025-1115

RT-Thread up to 5.1.0 is affected by a local-information-disclosure vulnerability in the lwp_syscall.c path (sys_device_close/sys_device_control/etc.). The issue stems from improper handling/manipulation of the argument arg[0], enabling information disclosure via local access. Exploit details are...

CVE-2024-25388

drivers/wlan/wlanmgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow...

PT-2024-20913 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: The issue is related to a weak random number generation algorithm used in RT-Thread. The algorithm, defined as seed = 214013L seed + 2531011L; return seed 16 & 0x7FFF;, is implemented in the calc...