Unrated severityNVD Advisory· Published Jul 2, 2024· Updated Oct 29, 2024

CVE-2022-25477

Description

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Realtek/RtsPer, RtsUer driverdescription
Realtek/RtsPerllm-create
Range: <10.0.22000.21355
Realtek/RtsUerllm-create
Range: <10.0.22000.31274

Patches

Vulnerability mechanics

References

realtek.commitre
gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408amitre
www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdfmitre
zwclose.github.io/2024/10/14/rtsper1.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000