| عنوان | RT-Thread 5.1.0 Improper Handling of Parameters |
|---|
| الوصف | I have identified a critical vulnerability in the `sys_device_init` system call in RT-Thread. This vulnerability stems from insufficient pointer validation and could allow an attacker to achieve arbitrary code execution through control flow hijacking. The issue is particularly severe as it could be exploited by a compromised user thread to gain elevated privileges. |
|---|
| المصدر | ⚠️ https://github.com/RT-Thread/rt-thread/issues/10388 |
|---|
| المستخدم | Zephyr Saxon (UID 80853) |
|---|
| ارسال | 12/06/2025 06:55 AM (1 سنة منذ) |
|---|
| الاعتدال | 26/06/2025 09:11 AM (14 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 313959 [RT-Thread حتى 5.1.0 device.c تلف الذاكرة] |
|---|
| النقاط | 0 |
|---|