ZDI-CAN-26553: Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the N6CSetDOT11CIPHERDEFAULTKEY function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-8302.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-26553?
The severity of ZDI-CAN-26553 is high due to its potential to allow local privilege escalation.
How do I fix ZDI-CAN-26553?
To fix ZDI-CAN-26553, ensure that you apply the latest patches provided by Realtek for the rtl81xx SDK.
What types of attacks can ZDI-CAN-26553 facilitate?
ZDI-CAN-26553 can facilitate local privilege escalation attacks by allowing an attacker to gain higher access rights.
Who is affected by ZDI-CAN-26553?
ZDI-CAN-26553 affects installations of the Realtek rtl81xx SDK Wi-Fi driver.
What requirements must be met to exploit ZDI-CAN-26553?
An attacker must first achieve low-privileged code execution on the target system to exploit ZDI-CAN-26553.