8.6
High
CVE-2025-5865 A vulnerability was found in RT-Thread 5.1.0
Description
A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sys_select of the file rt-thread/components/lwp/lwp_syscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor explains, that "[t]he timeout parameter should be checked to check if it can be accessed correctly in kernel mode and used temporarily in kernel memory."
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RT-Thread | 5.1.0 | No fix stated |
References
- VDB-311624 | RT-Thread Parameter lwp_syscall.c sys_select memory corruption vuldb.com
- VDB-311624 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #584124 | RT-Thread 5.1.0 Improper Handling of Parameters vuldb.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of RT-Thread
The 11 CVEs of RT-Thread →
CVE-2026-14629
A flaw has been found in RT-Thread up to 5.2.2
5.3
Medium
CVE-2026-14607
A weakness has been identified in RT-Thread up to 5.0.2
6.8
Medium
CVE-2026-14606
A security flaw has been discovered in RT-Thread up to 5.0.2
8.5
High
CVE-2026-14605
A vulnerability was identified in RT-Thread up to 5.0.2
8.5
High