Heap-based Buffer Overflow Vulnerability in Realtek rtl81xx SDK Wi-Fi Driver

CVE-2025-8299

What is CVE-2025-8299?

A vulnerability has been identified within the MgntActSet_TEREDO_SET_RS_PACKET function of the Realtek rtl81xx SDK Wi-Fi driver, which could allow local attackers to escalate their privileges on affected systems. This issue stems from inadequate validation of user-supplied data lengths before they are copied into a fixed-length heap-based buffer. If successfully exploited, this vulnerability enables an attacker to execute arbitrary code with elevated SYSTEM privileges, posing significant security risks to the integrity of the affected installations.

References