CVE-2026-36355
גבוהה 7.7
תיאור (מקור, אנגלית)
The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (ioctl 0x89F5) and read_mem (ioctl 0x89F6) debug handlers, which are compiled into production builds via the unconditionally defined _IOCTL_DEBUG_CMD_ macro in 8192cd_cfg.h
מדדים
- CVSS 3.1
-
7.7 (HIGH)
מקור הציון: CNA
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - EPSS — סבירות ניצול
- 1% (אחוזון 000) נכון ל-31/7/2026
- CWE
- CWE-200, CWE-782, CWE-787