Lucene search
+L

1485 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/09/02 12:00 a.m.16 views

Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS7.6AI score0.00149EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/02 12:00 a.m.12 views

Realtek RTL8811AU 安全漏洞

The Realtek RTL8811AU is a controller chip from Realtek Semiconductor Realtek, a Chinese company. A security vulnerability exists in the Realtek RTL8811AU that stems from insufficient validation of the N6CSetDOT11CIPHERDEFAULTKEY function, which could lead to local elevation of privilege...

7.8CVSS7.3AI score0.00149EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2025/09/02 12:00 a.m.18 views

Realtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KEY Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Realtek RTL8811AU drivers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.6AI score0.00149EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/09/02 12:00 a.m.20 views

Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS7.6AI score0.00149EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/09/02 12:00 a.m.15 views

Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS7.6AI score0.00149EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-38647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: sar: drop lockdep assertion in rtw89setsarfromacpi The following assertion is...

5.5CVSS5.3AI score0.00137EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/24 4:07 p.m.7 views

CVE-2025-38647

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: sar: drop lockdep assertion in rtw89setsarfromacpi The following assertion is triggered on the rtw89 driver startup. It looks meaningless to hold wiphy lock on the early init stage so drop the assertion. WARNING: CPU...

5.5CVSS6.3AI score0.00137EPSS
SaveExploits0References4
NVD
NVD
added 2025/08/22 4:15 p.m.15 views

CVE-2025-38647

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: sar: drop lockdep assertion in rtw89setsarfromacpi The following assertion is triggered on the rtw89 driver startup. It looks meaningless to hold wiphy lock on the early init stage so drop the assertion. WARNING: CPU...

5.5CVSS0.00137EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/22 4:00 p.m.45 views

CVE-2025-38647

CVE-2025-38647 affects the Linux kernel wifi/rtw89 driver. The issue is a dropped lockdep assertion in rtw89_set_sar_from_acpi during driver startup, which could trigger under early init and is resolved by the kernel fix. The vulnerability details, call trace, and affected chain are documented in...

5.5CVSS6.5AI score0.00137EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/08/22 4:00 p.m.27 views

CVE-2025-38647 wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: sar: drop lockdep assertion in rtw89setsarfromacpi The following assertion is triggered on the rtw89 driver startup. It looks meaningless to hold wiphy lock on the early init stage so drop the assertion. WARNING: CPU...

0.00137EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/22 12:00 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from rtw89 sar performing a meaningless lock assertion check during the initialization phase...

5.5CVSS6.2AI score0.00137EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2025/08/18 3:01 p.m.12 views

kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtwfwbtwificontrolrtwdev, para0, &para1', which reads 5 bytes: void rtwfwbtwificontrolstruct...

7.1CVSS6.9AI score0.00145EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-53204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtkusb3phyprobe In rtkusb3phyprobe devmkzalloc may retu...

5.5CVSS5.6AI score0.00216EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2021-47065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rtw88: Fix array overrun in rtwgettxpowerparams Using a kernel with the Undefined Behaviour...

7.8CVSS5.5AI score0.00234EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/06 12:00 a.m.21 views

PT-2025-32131 · Realtek · Realtek Wi-Fi

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A transient Denial-of-Service DoS condition may occur when processing a frame containing a malformed shared-key descriptor. Recommendations: At the moment, there is no information about a newer...

7.5CVSS6.2AI score0.00207EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/08/04 3:19 p.m.8 views

kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove

In the Linux kernel, the following vulnerability has been resolved: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in rtsxusbmspollcard+0x159/0x20...

7.8CVSS6.8AI score0.00207EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/07/11 12:25 a.m.12 views

CVE-2025-44526

Realtek RTL8762EKF-EVB RTL8762E SDK V1.4.0 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy BLE data packets. This issue allows attackers to cause a Denial of Service DoS via a crafted LLLengthReq packet...

6.5CVSS7.2AI score0.00282EPSS
SaveExploits1References1
NVD
NVD
added 2025/07/09 4:15 p.m.13 views

CVE-2025-49604

For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d before commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a on 2025/07/03. In the WLAN driver defragment function, lack of validation of the size of fragmented...

5.4CVSS0.00319EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/09 4:15 p.m.10 views

CVE-2025-44526

Realtek RTL8762EKF-EVB RTL8762E SDK V1.4.0 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy BLE data packets. This issue allows attackers to cause a Denial of Service DoS via a crafted LLLengthReq packet...

6.5CVSS5.8AI score0.00282EPSS
SaveExploits1References3
NVD
NVD
added 2025/07/09 4:15 p.m.12 views

CVE-2025-44526

Realtek RTL8762EKF-EVB RTL8762E SDK V1.4.0 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy BLE data packets. This issue allows attackers to cause a Denial of Service DoS via a crafted LLLengthReq packet...

6.5CVSS0.00282EPSS
SaveExploits1References1
Rows per page
Query Builder