CVE-2022-25477

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR.

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.21% chance of exploitation in the next 30 days, 11th percentile

Published

2024-07-02

Updated

2026-07-09

Proof-of-concept exploits (1)

• zwclose/realteksd11★ · 2024-10-14

Security advisories

• https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report…
• https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a

References

• CVE Record
• NVD entry

Related

• CVE-2021-26258
• CVE-2022-25478
• CVE-2022-25479
• CVE-2022-25480
• CVE-2024-40431