Vulnerabilities > CVE-2022-25479 - Memory Leak vulnerability in Realtek Rtsper and Rtsuer

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
realtek
CWE-401
NVD
Published: 2024-07-02
Updated: 2024-11-21

Summary

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows for the leakage of kernel memory from both the stack and the heap.

Vulnerable Configurations

Part Description Count
Application
Realtek
2

Common Weakness Enumeration (CWE)

References