8.6
Élevée
CVE-2025-5865 A vulnerability was found in RT-Thread 5.1.0
Description
A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sys_select of the file rt-thread/components/lwp/lwp_syscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor explains, that "[t]he timeout parameter should be checked to check if it can be accessed correctly in kernel mode and used temporarily in kernel memory."
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RT-Thread | 5.1.0 | Pas de correctif indiqué |
Références
- VDB-311624 | RT-Thread Parameter lwp_syscall.c sys_select memory corruption vuldb.com
- VDB-311624 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #584124 | RT-Thread 5.1.0 Improper Handling of Parameters vuldb.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de RT-Thread
Les 11 CVE de RT-Thread →
CVE-2026-14629
A flaw has been found in RT-Thread up to 5.2.2
5.3
Moyenne
CVE-2026-14607
A weakness has been identified in RT-Thread up to 5.0.2
6.8
Moyenne
CVE-2026-14606
A security flaw has been discovered in RT-Thread up to 5.0.2
8.5
Élevée
CVE-2026-14605
A vulnerability was identified in RT-Thread up to 5.0.2
8.5
Élevée