PT-2025-35606 · Realtek · Rtl8811Au Drivers

Dungnm · Published 2025-09-02 · Updated 2025-09-02 · CVE-2025-8298

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Realtek RTL8811AU drivers (affected versions not specified)

Description A flaw exists within the N6CQueryInformationHandleCustomized11nOids function in Realtek RTL8811AU drivers. The issue is due to insufficient validation of user-supplied data, leading to a read past the end of an allocated buffer. This can allow local attackers to disclose sensitive information. An attacker must first obtain the ability to execute low-privileged code on the target system to exploit this issue. Exploitation of this vulnerability, in conjunction with other vulnerabilities, may lead to arbitrary code execution in the kernel context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-8298

ZDI-25-881

Affected Products

Rtl8811Au Drivers

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-8298 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-881 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8298 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1962995770996470048 · Twitter Post
• https://twitter.com/CVEnew/status/1962976543044436432 · Twitter Post