Exploit for CVE-2025-5867

cve · 2025-06-09

Description

Critical CVE-2025-5867 in RT-Thread 5.1.0 causes null pointer dereference in csys_sendto function.

Affected Rt-thread versions

Rt-thread= 5.1.0

All known vulnerabilities by product

Rt-Thread

CVSS 9.8 for CVE-2025-5867

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:ADJACENT

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:LOW

User Interaction:NONE

EPSS Score

1.1%higher than 61.6% of all CVEs

Updated 2026-08-29

CVE Information

CVE-2025-5867

References

https://vuldb.com/?submit.584129

https://vuldb.com/?ctiid.311626

https://github.com/RT-Thread/rt-thread/issues/10299

https://vuldb.com/?id.311626

Exploit Details

Modified:2026-06-17 09:48

Last Seen:2026-08-20 18:15

Reporter:VulDB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2025-5867
A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csys_sendto of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument to leads to null pointer dereference.

Exploit Code

Share

Share on social media: