Realtek

Products

ProductCVEsExploitedLatest
rtl819x Jungle SDK19–Jul 8, 2024
Linux/Android Bluetooth Mesh SDK4–Aug 30, 2022
rtl81xx SDK3–Sep 2, 2025
RTL8111FP-CG2–Nov 29, 2022
RTL8811AU2–Sep 2, 2025
Realtek Audio Service1–Jun 19, 2026
RTL8111EP-CG1–Nov 29, 2022
ADSL/PON Modem SoC1–Jun 8, 2020
USB FE/1GbE/2.5GbE/5GbE NIC Family1–Jun 20, 2022
Bluetooth HCI Adaptor1–Jun 2, 2025
GPON router1–Jan 3, 2023
HDA driver1–Jul 7, 2021
Realtek Andrea RT Filters1–Jan 27, 2026

Exploited and recent CVEs

  • CVE-2020-37252 High 7.8 Realtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation 0.2%
  • CVE-2020-36974 High 7.8 Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path 0.2%
  • CVE-2025-8300 High 8.8 Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability 0.2%
  • CVE-2025-8299 High 8.8 Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local Privilege Escalation Vulnerability 0.2%
  • CVE-2025-8298 Low 3.8 Realtek RTL8811AU rtwlanu.sys N6CQueryInformationHandleCustomized11nOids Out-Of-Bounds Read Information Disclosure Vulnerability 0.1%
  • CVE-2025-8301 High 7.8 Realtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KEY Heap-based Buffer Overflow Local Privilege Escalation Vulnerability 0.2%
  • CVE-2025-8302 High 8.8 Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability 0.2%
  • CVE-2024-11857 High 7.8 Realtek Bluetooth HCI Adaptor - Privilege Escalation 0.2%
  • CVE-2023-47677 High 8.8 A cross-site request forgery (csrf) vulnerability exists in the boa CSRF protection functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network request can lead to CSRF. An attack 0.4%
  • CVE-2023-34435 High 7.2 A firmware update vulnerability exists in the boa formUpload functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network packets can lead to arbitrary firmware update. An attacker 0.5%
  • CVE-2024-21778 High 7.2 A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted .dat file can lead to arbitrar 0.9%
  • CVE-2023-49073 High 7.2 A stack-based buffer overflow vulnerability exists in the boa formFilter functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code exe 0.9%
  • CVE-2023-48270 High 7.2 A stack-based buffer overflow vulnerability exists in the boa formDnsv6 functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code e 0.9%
  • CVE-2023-45742 High 7.2 An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary code ex 1.2%
  • CVE-2023-49595 High 7.2 A stack-based buffer overflow vulnerability exists in the boa rollback_control_code functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbi 0.9%
  • CVE-2023-45215 High 7.2 A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary 1.0%
  • CVE-2023-47856 High 7.2 A stack-based buffer overflow vulnerability exists in the boa set_RadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remot 1.4%
  • CVE-2023-50240 High 7.2 Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to 1.4%
  • CVE-2023-50239 High 7.2 Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to 1.4%
  • CVE-2023-41251 High 7.2 A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code executi 1.3%
  • CVE-2023-50244 High 7.2 Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code exec 1.4%
  • CVE-2023-50243 High 7.2 Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code exec 1.4%
  • CVE-2023-50383 High 7.2 Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execu 1.9%
  • CVE-2023-50382 High 7.2 Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execu 1.9%
  • CVE-2023-50381 High 7.2 Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execu 3.2%
  • CVE-2023-50330 High 7.2 A stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution 1.1%
  • CVE-2023-49867 High 7.2 A stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution 1.1%
  • CVE-2022-40740 High 7.2 Realtek GPON router - Command Injection 1.5%
  • CVE-2022-32967 Low 2.1 Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials 0.3%
  • CVE-2022-32967 Low 2.1 Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials 0.3%