PT-2026-110549 · Rt-Thread · Rt-Thread
CVSS v3.1
4.6
Medium
| Vector | AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx ringbuffer as a Serial V2 rt serial rx fifo in function enable(). A connected USB host configuring the CDC device triggers writes past the ring buffer into struct vcom members and an invalid rt free() on close, causing denial of service.
Fix
Type Confusion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rt-Thread