We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2022-25477



Assignermitre
Reserved2022-02-21
Published2024-07-02
Updated2024-10-29

Description

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR.

References

http://realtek.com

https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf

https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a

https://zwclose.github.io/2024/10/14/rtsper1.html

cve.org CVE-2022-25477

nvd.nist.gov CVE-2022-25477

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2022-25477
Subscribe to our newsletter to learn more about our work.