CVE-2022-25479

Medium

Description

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows for the leakage of kernel memory from both the stack and the heap.

SeverityMedium
CVSS5.5
Exploit probability—
ProductRealtek Rtsper
PublishedJul 2, 2024
First seenJul 2, 2024
Weakness typeCWE-401CWE-401

How to fix

Update
  • realtek rtsper10.0.22000.21355 or later
  • realtek rtsuer10.0.22000.31274 or later

Affected products

ProductAffected versionsFixed in
realtek rtsperv < 10.0.22000.2135510.0.22000.21355
realtek rtsuerv < 10.0.22000.3127410.0.22000.31274

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-25479 · Realtek Rtsper · Dark Radar