CVE-2025-1115

CVSS 2.0 Score 1.7 of 10 (low)

Details

Published Feb 8, 2025
Updated: Feb 16, 2025
CWE ID 284
CWE ID 200

Summary

CVE-2025-1115 is a recently discovered vulnerability affecting RT-Thread versions up to 5.1.0. This issue lies in the functions sys_device_close through sys_shmdt in the file rt-thread/components/lwp/lwp_syscall.c. The exploitation of this vulnerability occurs when an attacker manipulates the arg[0] argument, resulting in information disclosure. A local attack is necessary for an attacker to successfully exploit this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Rt-Thread

Affected Vendors

  • RT-Thread Software