CVE-2022-21742: Realtek RTL8152B Firmware

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function. An unauthenticated LAN attacker can exploit this vulnerability to disrupt services.

Affected products

• Realtek RTL8152B Firmware: from 7.42, up to and including 7.53; from 8.49, up to and including 8.60; from 10.28, before 10.50 (fixed in 10.50)
• Realtek RTL8153 Firmware: from 7.42, up to and including 7.53; from 8.49, up to and including 8.60; from 10.28, before 10.50 (fixed in 10.50)
• Realtek RTL8153B Firmware: from 7.42, up to and including 7.53; from 8.49, up to and including 8.60; from 10.28, before 10.50 (fixed in 10.50)
• Realtek RTL8154 Firmware: from 7.42, up to and including 7.53; from 8.49, up to and including 8.60; from 10.28, before 10.50 (fixed in 10.50)
• Realtek RTL8154B Firmware: from 7.42, up to and including 7.53; from 8.49, up to and including 8.60; from 10.28, before 10.50 (fixed in 10.50)
• Realtek RTL8156 Firmware: from 7.42, up to and including 7.53; from 8.49, up to and including 8.60; from 10.28, before 10.50 (fixed in 10.50)
• Realtek RTL8156B Firmware: from 7.42, up to and including 7.53; from 8.49, up to and including 8.60; from 10.28, before 10.50 (fixed in 10.50)

Published 2022-06-20. Last modified 2026-06-17.