CVE-2025-6693

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-6693
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6693.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-6693
Published
2025-06-26T13:15:29.593Z
Modified
2026-04-10T05:34:39.848904Z
Severity
  • 8.5 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
Summary
[none]
Details

A vulnerability, which was classified as critical, was found in RT-Thread up to 5.1.0. This affects the function sysdeviceopen/sysdeviceread/sysdevicecontrol/sysdeviceinit/sysdeviceclose/sysdevicewrite of the file components/drivers/core/device.c. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The vendor was contacted early about this disclosure but did not respond in any way.

References

Affected packages

Git / github.com/RT-Thread/rt-thread

Affected ranges

Type
GIT
Repo
https://github.com/RT-Thread/rt-thread
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4f7940167d172858e37373bc330c7093e8765d5b
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.1.0"
        }
    ]
}

Affected versions

v1.*
v1.2.0
v2.*
v2.0.0
v2.0.0_alpha
v2.0.0_beta
v2.0.0_rc
v2.1.0
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.0.4
v3.1.0
v3.1.1
v4.*
v4.0.0
v4.0.1
v4.0.2
v4.0.3
v4.1.0
v4.1.0-beta
v4.1.1
v4.1.1-beta
v5.*
v5.0.0
v5.0.1
v5.0.2
v5.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6693.json"