Medium severity5.5NVD Advisory· Published Jul 2, 2024· Updated Jul 9, 2026

CVE-2022-25477

Description

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Realtek/RtsPer
cpe:2.3:a:realtek:rtsper:*:*:*:*:*:*:*:*
Range: <10.0.22000.21355
Realtek/RtsUer
cpe:2.3:a:realtek:rtsuer:*:*:*:*:*:*:*:*
Range: <10.0.22000.31274
Realtek/RtsPer, RtsUer driverdescription
Realtek/RtsPer driver for PCIe Card Readerllm-fuzzy
Range: <10.0.22000.21355

Patches

Vulnerability mechanics

References

gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408anvdThird Party Advisory
www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdfnvdVendor Advisory
zwclose.github.io/2024/10/14/rtsper1.htmlnvd

News mentions

ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
The Hacker News · Jul 9, 2026

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000