PT-2024-19051 · Realtek · Realtek Rtl819X Jungle Sdk

Francesco Benvenuto + 1 · Published 2024-07-08 · Updated 2024-07-11 · CVE-2024-21778

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Realtek rtl819x Jungle SDK version 3.4.11

Description A heap-based buffer overflow vulnerability exists in the configuration file mib init value array functionality. A specially crafted .dat file can lead to arbitrary code execution. An attacker can upload a malicious file to trigger this vulnerability.

Recommendations For Realtek rtl819x Jungle SDK version 3.4.11, consider restricting access to the configuration file mib init value array functionality to minimize the risk of exploitation. Avoid uploading unverified .dat files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2024-21778

Affected Products

Realtek Rtl819X Jungle Sdk

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-21778 · Security Note
• https://osv.dev/vulnerability/CVE-2024-21778 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1810384411474444794 · Twitter Post
• https://t.me/cvedetector/194 · Telegram Post
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1911 · Note
• https://twitter.com/cracbot/status/1811279344951759101 · Twitter Post
• https://twitter.com/CVEnew/status/1810337797825302647 · Twitter Post