{"id":56031,"date":"2025-06-29T23:34:57","date_gmt":"2025-06-29T23:34:57","guid":{"rendered":""},"modified":"2025-09-06T12:12:34","modified_gmt":"2025-09-06T18:12:34","slug":"cve-2025-5867-critical-vulnerability-in-rt-thread-5-1-0-leading-to-system-compromise-or-data-leakage","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-5867-critical-vulnerability-in-rt-thread-5-1-0-leading-to-system-compromise-or-data-leakage\/","title":{"rendered":"CVE-2025-5867: Critical Vulnerability in RT-Thread 5.1.0 leading to system compromise or data leakage<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The cybersecurity landscape is riddled with vulnerabilities that offer potential entry points for malicious actors. One such critical vulnerability, CVE-2025-5867, has been discovered in RT-Thread 5.1.0, an open-source, real-time operating system. This vulnerability specifically affects the file<\/a> rt-thread\/components\/lwp\/lwp_syscall.c, and more precisely, the function csys_sendto. With the right manipulation, this could lead to a null pointer dereference, potentially compromising the system<\/a> or causing data leakage. This vulnerability is of significant concern to all users of RT-Thread<\/a> 5.1.0 due to its potential to cause extensive harm.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-5867
\nSeverity: Critical (CVSS score 8.0)
\nAttack Vector: Local network
\nPrivileges Required: Low
\nUser Interaction: None
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n