realtek Vulnerability Advisory Catalog

Total 68 security vulnerabilities recorded for realtek software and firmware.

← Back to All Vendors
CVE-2021-35395 CRITICAL
Component: rtl819x_jungle_software_development_kit

Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access po...

๐Ÿ“… 2021-08-16
CVSS 9.8 Dossier →
CVE-2021-35394 CRITICAL
Component: rtl819x_jungle_software_development_kit

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binar...

๐Ÿ“… 2021-08-16
CVSS 9.8 Dossier →
CVE-2021-35393 CRITICAL
Component: rtl819x_jungle_software_development_kit

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usua...

๐Ÿ“… 2021-08-16
CVSS 9.8 Dossier →
Component: rtl819x_jungle_software_development_kit

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usua...

๐Ÿ“… 2021-08-16
CVSS 7.5 Dossier →
Component: hda_driver

Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a userโ€™s mode. ...

๐Ÿ“… 2021-07-07
CVSS 6.5 Dossier →
Component: rtl8710c_firmware

A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "memcpy" function, when an attack...

๐Ÿ“… 2021-06-04
CVSS 8.0 Dossier →
Component: rtl8710c_firmware

A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function, when an at...

๐Ÿ“… 2021-06-04
CVSS 8.0 Dossier →
Component: rtl8723de_firmware

An issue was discovered in Realtek rtl8723de BLE Stack <= 4.1 that allows remote attackers to cause a Denial of Service via the interval field to the ...

๐Ÿ“… 2021-04-08
CVSS 7.5 Dossier →
CVE-2021-27372 CRITICAL
Component: xpon_rtl9601d_software_development_kit

Realtek xPON RTL9601D SDK 1.9 stores passwords in plaintext which may allow attackers to possibly gain access to the device with root permissions via ...

๐Ÿ“… 2021-03-25
CVSS 9.8 Dossier →
Component: rtl8195a_firmware

The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not v...

๐Ÿ“… 2021-02-03
CVSS 7.5 Dossier →
Component: rtl8195a_firmware

The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not valida...

๐Ÿ“… 2021-02-03
CVSS 8.1 Dossier →
Component: rtl8195a_firmware

The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate t...

๐Ÿ“… 2021-02-03
CVSS 8.1 Dossier →
Component: rtl8195a_firmware

The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not valida...

๐Ÿ“… 2021-02-03
CVSS 8.1 Dossier →
Component: rtl8195a_firmware

The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the...

๐Ÿ“… 2021-02-03
CVSS 7.5 Dossier →
Component: rtl8812ar_firmware

A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vuln...

๐Ÿ“… 2020-09-30
CVSS 5.4 Dossier →
Component: rtl8711af_firmware

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the cl...

๐Ÿ“… 2020-07-06
CVSS 8.0 Dossier →
CVE-2020-12773 CRITICAL
Component: adsl_router_soc_firmware

A security misconfiguration vulnerability exists in the SDK of some Realtek ADSL/PON Modem SoC firmware, which allows attackers using a default passwo...

๐Ÿ“… 2020-06-08
CVSS 9.6 Dossier →
Component: ndis

Realtek NDIS driver rt640x64.sys, file version 10.1.505.2015, fails to do any size checking on an input buffer from user space, which the driver assum...

๐Ÿ“… 2020-02-12
CVSS 5.5 Dossier →
Component: audio_driver_firmware

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. A...

๐Ÿ“… 2017-11-13
CVSS 7.8 Dossier →
CVE-2008-5664 UNKNOWN
Component: realtek_media_player

Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute a...

๐Ÿ“… 2008-12-19
CVSS 9.3 Dossier →
Page 3 of 3 (68 Total Records)