CVE-2025-6693 Information

Jun 27, 2025 cve

Description

A vulnerability which was classified as critical was found in RT-Thread up to 5.1.0. This affects the function sys_device_open/sys_device_read/sys_device_control/sys_device_init/sys_device_close/sys_device_write of the file components/drivers/core/device.c. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Reference

https://github.com/RT-Thread/rt-thread/issues/10387 https://vuldb.com/?ctiid.313959 https://vuldb.com/?id.313959 https://vuldb.com/?submit.595813 https://vuldb.com/?submit.595814 https://vuldb.com/?submit.595827 https://vuldb.com/?submit.595869 https://vuldb.com/?submit.595870 https://vuldb.com/?submit.595871

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

7.8

CNNVD-202506-3300 (Published: 2025-06-26)

Share on: