Heap-based Buffer Overflow in Realtek rtl81xx SDK Wi-Fi Driver

CVE-2025-8302

What is CVE-2025-8302?

A local privilege escalation vulnerability exists in the Realtek rtl81xx SDK Wi-Fi driver, specifically within the N6CSet_DOT11_CIPHER_DEFAULT_KEY function. This flaw arises from inadequate validation of user-supplied data length before it is copied to a fixed-length heap-based buffer. By exploiting this weakness, an attacker can escalate their privileges, allowing them to execute arbitrary code within the context of the SYSTEM user. To successfully carry out the attack, the attacker must first have the ability to execute low-privileged code on the system.

References