Realtek
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| rtl819x Jungle SDK | 19 | – | Jul 8, 2024 |
| Linux/Android Bluetooth Mesh SDK | 4 | – | Aug 30, 2022 |
| rtl81xx SDK | 3 | – | Sep 2, 2025 |
| RTL8111FP-CG | 2 | – | Nov 29, 2022 |
| RTL8811AU | 2 | – | Sep 2, 2025 |
| Realtek Audio Service | 1 | – | Jun 19, 2026 |
| RTL8111EP-CG | 1 | – | Nov 29, 2022 |
| ADSL/PON Modem SoC | 1 | – | Jun 8, 2020 |
| USB FE/1GbE/2.5GbE/5GbE NIC Family | 1 | – | Jun 20, 2022 |
| Bluetooth HCI Adaptor | 1 | – | Jun 2, 2025 |
| GPON router | 1 | – | Jan 3, 2023 |
| HDA driver | 1 | – | Jul 7, 2021 |
| Realtek Andrea RT Filters | 1 | – | Jan 27, 2026 |
Exploited and recent CVEs
- CVE-2020-37252 Realtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation 0.2%
- CVE-2020-36974 Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path 0.2%
- CVE-2025-8300 Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability 0.2%
- CVE-2025-8299 Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local Privilege Escalation Vulnerability 0.2%
- CVE-2025-8298 Realtek RTL8811AU rtwlanu.sys N6CQueryInformationHandleCustomized11nOids Out-Of-Bounds Read Information Disclosure Vulnerability 0.1%
- CVE-2025-8301 Realtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KEY Heap-based Buffer Overflow Local Privilege Escalation Vulnerability 0.2%
- CVE-2025-8302 Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability 0.2%
- CVE-2024-11857 Realtek Bluetooth HCI Adaptor - Privilege Escalation 0.2%
- CVE-2023-47677 A cross-site request forgery (csrf) vulnerability exists in the boa CSRF protection functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network request can lead to CSRF. An attack 0.4%
- CVE-2023-34435 A firmware update vulnerability exists in the boa formUpload functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network packets can lead to arbitrary firmware update. An attacker 0.5%
- CVE-2024-21778 A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted .dat file can lead to arbitrar 0.9%
- CVE-2023-49073 A stack-based buffer overflow vulnerability exists in the boa formFilter functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code exe 0.9%
- CVE-2023-48270 A stack-based buffer overflow vulnerability exists in the boa formDnsv6 functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code e 0.9%
- CVE-2023-45742 An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code ex 1.2%
- CVE-2023-49595 A stack-based buffer overflow vulnerability exists in the boa rollback_control_code functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbi 0.9%
- CVE-2023-45215 A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary 1.0%
- CVE-2023-47856 A stack-based buffer overflow vulnerability exists in the boa set_RadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remot 1.4%
- CVE-2023-50240 Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to 1.4%
- CVE-2023-50239 Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to 1.4%
- CVE-2023-41251 A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code executi 1.3%
- CVE-2023-50244 Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code exec 1.4%
- CVE-2023-50243 Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code exec 1.4%
- CVE-2023-50383 Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execu 1.9%
- CVE-2023-50382 Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execu 1.9%
- CVE-2023-50381 Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execu 3.2%
- CVE-2023-50330 A stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution 1.1%
- CVE-2023-49867 A stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution 1.1%
- CVE-2022-40740 Realtek GPON router - Command Injection 1.5%
- CVE-2022-32967 Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials 0.3%
- CVE-2022-32967 Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials 0.3%