CVE-2025-5865

A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sys_select of the file rt-thread/components/lwp/lwp_syscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor explains, that "[t]he timeout parameter should be checked to check if it can be accessed correctly in kernel mode and used temporarily in kernel memory."

• CWE-119

• https://github.com/RT-Thread/rt-thread/issues/10298Exploit, Issue Tracking, Third Party Advisory
• https://github.com/RT-Thread/rt-thread/issues/10298#issuecomment-2894952150Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.311624Permissions Required, VDB Entry
• https://vuldb.com/?id.311624Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.584124Third Party Advisory, VDB Entry
• https://github.com/RT-Thread/rt-thread/issues/10298Exploit, Issue Tracking, Third Party Advisory

Published

Jun 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-58644Deserialization of Untrusted Data vulnerability in eniturete…7.2
• CVE-2025-58645Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2025-58646Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2025-58647Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2025-58648Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-58649Insertion of Sensitive Information Into Sent Data vulnerabil…4.3
• CVE-2025-58650Missing Authorization vulnerability in Syed Balkhi All In On…5.4
• CVE-2025-58651Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-58652Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-58653Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-58654Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-58655Improper Neutralization of Input During Web Page Generation …5.9