CVE-2022-25479

Overview: CVE-2022-25479 describes memory leakage in Realtek RtsPer.sys (PCIe Card Reader) and RtsUer.sys (USB Card Reader) drivers, before 10.0.22000.21355 and 10.0.22000.31274 respectively. Root cause / impact: memory release errors allow leakage of kernel memory from stack and heap; exploitati...

CVE-2022-25480

CVE-2022-25480 affects Realtek Realtek RtsPer.sys (PCIe Card Reader) and RtsUer.sys (USB Card Reader). The issue is a memory/write vulnerability that allows writing to kernel memory beyond the SystemBuffer of the IRP due to a buffer overflow in these drivers. Affected versions are RtsPer.sys prio...

CVE-2022-25478

Realtek RtsPer.sys (PCIe Card Reader) and Realtek RtsUer.sys (USB Card Reader) are affected. Versions prior to 10.0.22000.21355 (RtsPer) and prior to 10.0.22000.31274 (RtsUer) expose read/write access to the device PCI configuration space due to insufficient input validation. This is the concrete...

CVE-2022-25477

The CVE-2022-25477 issue affects Realtek RtsPer.sys (PCIe Card Reader) and Realtek RtsUer.sys (USB Card Reader). Affected versions are RtsPer before 10.0.22000.21355 and RtsUer before 10.0.22000.31274. The vulnerability leaks driver logs that contain addresses of kernel-mode objects, weakening KA...