CVE-2022-25480

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows writing to kernel memory beyond the SystemBuffer of the IRP.

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.19% chance of exploitation in the next 30 days, 8th percentile

Published

2024-07-02

Updated

2026-07-09

Proof-of-concept exploits (1)

• zwclose/realteksd11★ · 2024-10-14

Security advisories

• https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report…
• https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a

References

• CVE Record
• NVD entry

Related

• CVE-2021-26258
• CVE-2022-25477
• CVE-2022-25478
• CVE-2022-25479
• CVE-2024-40431