Skip to content
OpenAdvisories
Medium · 6.2 CVE-2022-21742 EUVD-2022-26906GHSA-5rv3-34jj-v83f

Realtek USB FE/1GbE/2.5GbE/5GbE NIC Family - Buffer Overflow

Published Jun 20, 2022 · Updated Sep 17, 2024 · Assigned by twcert

Description

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function. An unauthenticated LAN attacker can exploit this vulnerability to disrupt services.

Affected products

VendorProductAffectedFixed
Realtek USB FE/1GbE/2.5GbE/5GbE NIC Family 10.28 – ≤ 10.39, 8.49 – ≤ 8.60, 7.42 – ≤ 7.53 —

References