Medium severity5.5NVD Advisory· Published Jul 2, 2024· Updated Jul 9, 2026

CVE-2022-25479

Description

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows for the leakage of kernel memory from both the stack and the heap.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Realtek/RtsPer2 versions
cpe:2.3:a:realtek:rtsper:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:realtek:rtsper:*:*:*:*:*:*:*:*range: <10.0.22000.21355
- (no CPE)range: <10.0.22000.21355
Realtek/RtsUer2 versions
cpe:2.3:a:realtek:rtsuer:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:realtek:rtsuer:*:*:*:*:*:*:*:*range: <10.0.22000.31274
- (no CPE)range: <10.0.22000.31274
Realtek/RtsPer, RtsUer driverdescription

Patches

Vulnerability mechanics

References

gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408anvdThird Party Advisory
www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdfnvdVendor Advisory
zwclose.github.io/2024/10/14/rtsper1.htmlnvd

News mentions

ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
The Hacker News · Jul 9, 2026

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000