Описание
A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csys_sendto of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument to leads to null pointer dereference.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- Permissions RequiredVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:rt-thread:rt-thread:5.1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00299
Низкий
8 High
CVSS3
9.8 Critical
CVSS3
7.7 High
CVSS2
Дефекты
CWE-404
CWE-476
Связанные уязвимости
CVSS3: 8
github
8 месяцев назад
A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csys_sendto of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument to leads to null pointer dereference.
EPSS
Процентиль: 53%
0.00299
Низкий
8 High
CVSS3
9.8 Critical
CVSS3
7.7 High
CVSS2
Дефекты
CWE-404
CWE-476