CVE-2024-25392: Medium severity rt-thread rt-thread vulnerability
Published Mar 27, 2024
·Updated
An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2.
Affected Software
2 affected components
RT-Thread RT-Thread<=5.0.2
RT-Thread RT-Thread<=5.0.2
Event History
Mar 27, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-25392?
CVE-2024-25392 has a high severity due to the potential risks associated with out-of-bounds access.
2
How do I fix CVE-2024-25392?
To fix CVE-2024-25392, update RT-Thread to a version later than 5.0.2 where the vulnerability is patched.
3
What impact does CVE-2024-25392 have on RT-Thread?
CVE-2024-25392 can lead to unauthorized access and potential malicious exploitation in RT-Thread systems.
4
Is CVE-2024-25392 exploitable remotely?
Yes, CVE-2024-25392 is exploitable remotely if the affected software is exposed to untrusted inputs.
5
What versions of RT-Thread are affected by CVE-2024-25392?
Versions of RT-Thread up to and including 5.0.2 are affected by CVE-2024-25392.