CVE-2025-6693: RT-Thread device.c sys_device_write memory corruption
A vulnerability, which was classified as critical, was found in RT-Thread up to 5.1.0. This affects the function sysdeviceopen/sysdeviceread/sysdevicecontrol/sysdeviceinit/sysdeviceclose/sysdevicewrite of the file components/drivers/core/device.c. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6693?
CVE-2025-6693 is classified as a critical vulnerability.
Which versions of RT-Thread are affected by CVE-2025-6693?
CVE-2025-6693 affects RT-Thread versions up to and including 5.1.0.
What components are impacted by CVE-2025-6693?
CVE-2025-6693 impacts the sys_device_open, sys_device_read, sys_device_control, sys_device_init, sys_device_close, and sys_device_write functions.
How do I fix CVE-2025-6693?
To mitigate CVE-2025-6693, upgrade RT-Thread to a version later than 5.1.0.
What type of vulnerability is CVE-2025-6693?
CVE-2025-6693 is a function manipulation vulnerability.