8.6 High

CVE-2025-5867 A vulnerability classified as critical was found in RT-Thread 5.1.0

Description

A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csys_sendto of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument to leads to null pointer dereference.

Affected products and versions

Product	Affected versions	Fixed in
RT-Thread	5.1.0	No fix stated

References

VDB-311626 | RT-Thread lwp_syscall.c csys_sendto null pointer dereference vuldb.com
VDB-311626 | CTI Indicators (IOB, IOC, IOA) vuldb.com
Submit #584129 | RT-Thread 5.1.0 Improper Handling of Parameters vuldb.com
github.com github.com

Timeline

Published June 9, 2025
Last modified June 9, 2025

The 11 CVEs of RT-Thread →

CVE-2026-14629 A flaw has been found in RT-Thread up to 5.2.2 5.3 Medium CVE-2026-14607 A weakness has been identified in RT-Thread up to 5.0.2 6.8 Medium CVE-2026-14606 A security flaw has been discovered in RT-Thread up to 5.0.2 8.5 High CVE-2026-14605 A vulnerability was identified in RT-Thread up to 5.0.2 8.5 High

Track this CVE

CVE-2025-5867 A vulnerability classified as critical was found in RT-Thread 5.1.0

Description

Affected products and versions

References

Timeline

Other CVEs of RT-Thread