CVE-2024-25392 | BDVDB-2026-228922 Detail
utilities_projectutilities
Description#
An out-of-bounds access occurs in utilities/var_export/var_export.c in RT-Thread through 5.0.2.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: local.
Weaknesses#
- CWE-125 Out-of-bounds Read
References#
- https://github.com/RT-Thread/rt-thread/issues/8290
- https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
- https://security.humanativaspa.it/multiple-vulnerabilities-in-rt-thread-rtos/
- https://seclists.org/fulldisclosure/2024/Mar/28
- http://www.openwall.com/lists/oss-security/2024/03/05/1
- http://seclists.org/fulldisclosure/2024/Mar/28
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.