CVE-2025-5867: Rt-Thread

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csys_sendto of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument to leads to null pointer dereference.

Affected products

• Rt-Thread Rt-Thread: version 5.1.0 only

Published 2025-06-09. Last modified 2026-06-17.