Enviar #584127: RT-Thread 5.1.0 Improper Handling of Parametersinformación

TítuloRT-Thread 5.1.0 Improper Handling of Parameters
DescripciónA vulnerability in the sys_sigprocmask system call in the Smart version of RT-Thread v5.1.0. This vulnerability stems from insufficient validation of the *how* parameter, which is used as an array index without proper bounds checking. If exploited by a compromised user thread, this issue could lead to severe security consequences, including kernel crashes and potential unauthorized memory access.
Fuente⚠️ https://github.com/RT-Thread/rt-thread/issues/10300
Usuario
 Zephyr Saxon (UID 80853)
Sumisión2025-05-24 04:46 (hace 1 Año)
Moderación2025-06-08 19:36 (16 days later)
EstadoAceptado
Entrada de VulDB311625 [RT-Thread 5.1.0 lwp_syscall.c sys_sigprocmask how desbordamiento de búfer]
Puntos20

Do you know our Splunk app?

Download it now for free!