Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-5865

Опубликовано: 09 июн. 2025
Источник: nvd
CVSS3: 8
CVSS3: 9.8
CVSS2: 7.7
EPSS Низкий

Описание

A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sys_select of the file rt-thread/components/lwp/lwp_syscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor explains, that "[t]he timeout parameter should be checked to check if it can be accessed correctly in kernel mode and used temporarily in kernel memory."

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:rt-thread:rt-thread:5.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 54%
0.00311
Низкий

8 High

CVSS3

9.8 Critical

CVSS3

7.7 High

CVSS2

Дефекты

CWE-119
NVD-CWE-Other

Связанные уязвимости

CVSS3: 8
github
8 месяцев назад

A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sys_select of the file rt-thread/components/lwp/lwp_syscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor explains, that "[t]he timeout parameter should be checked to check if it can be accessed correctly in kernel mode and used temporarily in kernel memory."

EPSS

Процентиль: 54%
0.00311
Низкий

8 High

CVSS3

9.8 Critical

CVSS3

7.7 High

CVSS2

Дефекты

CWE-119
NVD-CWE-Other