CVE-2025-6693

Source
https://cve.org/CVERecord?id=CVE-2025-6693
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6693.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-6693
Published
2025-06-26T13:00:15.142Z
Modified
2026-07-15T01:49:15.466324543Z
Severity
  • 8.5 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X CVSS Calculator
Summary
RT-Thread device.c sys_device_write memory corruption
Details

A vulnerability, which was classified as critical, was found in RT-Thread up to 5.1.0. This affects the function sysdeviceopen/sysdeviceread/sysdevicecontrol/sysdeviceinit/sysdeviceclose/sysdevicewrite of the file components/drivers/core/device.c. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-119"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6693.json"
}
References

Affected packages

Git / github.com/rt-thread/rt-thread

Affected ranges

Type
GIT
Repo
https://github.com/rt-thread/rt-thread
Events
Database specific
{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "cpe": "cpe:2.3:a:rt-thread:rt-thread:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.0"
        },
        {
            "last_affected": "5.0"
        },
        {
            "introduced": "5.1.0"
        },
        {
            "last_affected": "5.1.0"
        },
        {
            "introduced": "0"
        }
    ]
}

Affected versions

5.*
5.0
5.1.0
v5.*
v5.0.0
v5.0.1
v5.0.2
v5.1.0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6693.json"