CVE-2026-108952
MEDIUM
5,1
Source: [email protected]
Attack Vector: physical
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM
4,6
Source: [email protected]
Attack Vector: physical
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
Description
AI Translation Available
RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx_ringbuffer as a Serial V2 rt_serial_rx_fifo in _function_enable(). A connected USB host configuring the CDC device triggers writes past the ring buffer into struct vcom members and an invalid rt_free() on close, causing denial of service.
843
Access of Resource Using Incompatible Type ('Type Confusion')
IncompleteCommon Consequences
Security Scopes Affected:
Availability
Integrity
Confidentiality
Potential Impacts:
Read Memory
Modify Memory
Execute Unauthorized Code Or Commands
Dos: Crash, Exit, Or Restart
Applicable Platforms
Languages:
C, C++
https://github.com/RT-Thread/rt-thread
https://github.com/RT-Thread/rt-thread/blob/99428a1e7f7447955aa860f7c969273a120…
https://github.com/RT-Thread/rt-thread/commit/ceef6e0ccd646aef61b907aeb9f29269d…
https://github.com/RT-Thread/rt-thread/issues/11739
https://github.com/RT-Thread/rt-thread/pull/11770
https://www.vulncheck.com/advisories/rt-thread-through-5.3.0-memory-corruption-…