High severity7.8NVD Advisory· Published Jul 2, 2024· Updated Jul 9, 2026

CVE-2022-25480

Description

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows writing to kernel memory beyond the SystemBuffer of the IRP.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Realtek/RtsPer
cpe:2.3:a:realtek:rtsper:*:*:*:*:*:*:*:*
Range: <10.0.22000.21355
Realtek/RtsUer
cpe:2.3:a:realtek:rtsuer:*:*:*:*:*:*:*:*
Range: <10.0.22000.31274
Realtek/RtsPer, RtsUer driverdescription
Realtek/RtsPer driverllm-fuzzy
Range: <10.0.22000.21355

Patches

Vulnerability mechanics

References

gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408anvdThird Party Advisory
www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdfnvdVendor Advisory
zwclose.github.io/2024/10/14/rtsper1.htmlnvd

News mentions

ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
The Hacker News · Jul 9, 2026

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000