Gửi #595870: RT-Thread 5.1.0 Improper Handling of Parametersthông tin

tiêu đềRT-Thread 5.1.0 Improper Handling of Parameters
Mô tảI have identified a critical vulnerability in the `sys_device_close` system call in RT-Thread. This vulnerability stems from insufficient pointer validation and could allow an attacker to achieve arbitrary code execution through control flow hijacking. The issue is particularly severe as it could be exploited by a compromised user thread to gain elevated privileges.
Nguồn⚠️ https://github.com/RT-Thread/rt-thread/issues/10389
Người dùng
 Zephyr Saxon (UID 80853)
Đệ trình12/06/2025 06:57 (cách đây 1 Năm)
Kiểm duyệt26/06/2025 09:11 (14 days later)
Trạng tháiBản sao
Mục VulDB313959 [RT-Thread đến 5.1.0 device.c tràn bộ đệm]
điểm0

Interested in the pricing of exploits?

See the underground prices here!