CVE-2022-25480: Realtek Rtsper

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows writing to kernel memory beyond the SystemBuffer of the IRP.

Affected products

• Realtek Rtsper: before 10.0.22000.21355 (fixed in 10.0.22000.21355)
• Realtek Rtsuer: before 10.0.22000.31274 (fixed in 10.0.22000.31274)

Published 2024-07-02. Last modified 2026-07-09.