CVE-2022-25479

MEDIUM 5.5CVE-2022-25479 · Published 02/07/2024 · updated 09/07/2026

In short

CVE-2022-25479 is a MEDIUM (CVSS 5.5) vulnerability affecting rtsper (realtek), rtsuer (realtek).
Chance of exploitation in the next 30 days (EPSS): 0.64%, higher than 50.5% of all vulnerabilities.
Fix: update to 10.0.22000.21355, 10.0.22000.31274 or later.

Package	Affected versions	Patched versions
rtsper realtek	`< 10.0.22000.21355`	`10.0.22000.21355`
rtsuer realtek	`< 10.0.22000.31274`	`10.0.22000.31274`

Description

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows for the leakage of kernel memory from both the stack and the heap.

References

gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a · Third Party Advisory
realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf · Vendor Advisory
zwclose.github.io/2024/10/14/rtsper1.html

More vulnerabilities in rtsper

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

rtsper

realtek

< 10.0.22000.21355

10.0.22000.21355

rtsuer

realtek

< 10.0.22000.31274

10.0.22000.31274

More vulnerabilities in rtsper

See all →