Out-Of-Bounds Read Vulnerability in Realtek RTL8811AU Driver

CVE-2025-8298

What is CVE-2025-8298?

The Realtek RTL8811AU driver has a vulnerability in the N6CQueryInformationHandleCustomized11nOids function which leads to an out-of-bounds read condition. This flaw arises from inadequate validation of user-supplied data, allowing local attackers to exploit this issue and potentially disclose sensitive information. Successfully exploiting this vulnerability requires the attacker to have the capability to execute low-privileged code on the compromised system. This flaw could be leveraged in conjunction with other vulnerabilities to execute arbitrary code within the kernel context.

References