CVE-2025-1115
CVSS 2.0 Score 1.7 of 10 (low)
Details
Published Feb 8, 2025
Updated: Feb 16, 2025
CWE ID 284
CWE ID 200
Summary
CVE-2025-1115 is a recently discovered vulnerability affecting RT-Thread versions up to 5.1.0. This issue lies in the functions sys_device_close through sys_shmdt in the file rt-thread/components/lwp/lwp_syscall.c. The exploitation of this vulnerability occurs when an attacker manipulates the arg[0] argument, resulting in information disclosure. A local attack is necessary for an attacker to successfully exploit this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Rt-Thread
Affected Vendors
- RT-Thread Software