PT-2026-37043 · Realtek · Rtl819X Jungle Sdk

Daniil Gordeev · Published 2026-05-05 · Updated 2026-05-05 · CVE-2026-36355

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Realtek rtl819x Jungle SDK versions prior to v3.4.14B

Description The rtl8192cd Wi-Fi kernel driver fails to perform access control checks on the write mem (ioctl 0x89F5) and read mem (ioctl 0x89F6) debug handlers. These handlers are included in production builds due to the unconditionally defined IOCTL DEBUG CMD macro in the 8192cd cfg.h file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Memory Corruption

Weakness Enumeration

CWE-200

CWE-787

CWE-782

Related Identifiers

CVE-2026-36355

Affected Products

Rtl819X Jungle Sdk

References · 5

• 🔥 https://github.com/totekuh/CVE-2026-36355 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-36355 · Security Note
• http://realtek.com · Note
• https://twitter.com/infoflowcloud/status/2051742873868017956 · Twitter Post
• https://twitter.com/CVEnew/status/2051741664876654782 · Twitter Post