Security Flaw in Realtek PCIe and USB Card Reader Drivers

CVE-2022-25478

What is CVE-2022-25478?

A vulnerability exists in the Realtek RtsPer driver for PCIe card readers and the RtsUer driver for USB card readers, which allows read and write access to the PCI configuration space on affected devices. This flaw can lead to unauthorized manipulation of device settings and potential exploitation by malicious entities. Users of these drivers are advised to update to the latest versions to mitigate any associated security risks.

References