← Volver a CVEs
CVE-2025-6693
HIGH7.8
Descripcion
A vulnerability, which was classified as critical, was found in RT-Thread up to 5.1.0. This affects the function sys_device_open/sys_device_read/sys_device_control/sys_device_init/sys_device_close/sys_device_write of the file components/drivers/core/device.c. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The vendor was contacted early about this disclosure but did not respond in any way.
Detalles CVE
Puntuacion CVSS v3.17.8
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vector de ataqueLOCAL
ComplejidadLOW
Privilegios requeridosLOW
Interaccion usuarioNONE
Publicado6/26/2025
Ultima modificacion7/11/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
rt-thread:rt-thread
Debilidades (CWE)
CWE-119
Referencias
https://github.com/RT-Thread/rt-thread/issues/10387(cna@vuldb.com)
https://vuldb.com/?ctiid.313959(cna@vuldb.com)
https://vuldb.com/?id.313959(cna@vuldb.com)
https://vuldb.com/?submit.595813(cna@vuldb.com)
https://vuldb.com/?submit.595814(cna@vuldb.com)
https://vuldb.com/?submit.595827(cna@vuldb.com)
https://vuldb.com/?submit.595869(cna@vuldb.com)
https://vuldb.com/?submit.595870(cna@vuldb.com)
https://vuldb.com/?submit.595871(cna@vuldb.com)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.