CVE-2022-25479

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows for the leakage of kernel memory from both the stack and the heap.

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

EPSS

0.63% chance of exploitation in the next 30 days, 48th percentile

Published

2024-07-02

Updated

2026-07-09

Proof-of-concept exploits (2)

• SpiralBL0CK/CVE-2024-40431-CVE-2022-25479-EOP-CHAIN46★ · 2024-10-16
• zwclose/realteksd11★ · 2024-10-14

References

• CVE Record
• NVD entry

Related

• CVE-2021-26258
• CVE-2022-25477
• CVE-2022-25478
• CVE-2022-25480
• CVE-2024-40431
• CVE-2022-25481