[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-RvJoAVZIRt1UE6X5J2DUV1UOyDtD_oimVCh6hJqccE":3,"g5a-risk:CVE-2025-8299":113},{"success":4,"data":5,"meta":110},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":27,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":28,"references":45,"referencesCount":51,"weaknesses":52,"weaknessesCount":51,"isActivelyExploited":44,"cisaInfo":27,"otxData":27,"relatedBlogPosts":61,"seoMetadata":62,"configurations":87,"relatedVendorCves":101,"notableEvents":102},"CVE-2025-8299","What is CVE-2025-8299?","Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the MgntActSet_TEREDO_SET_RS_PACKET function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25857.","Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allo...","2025-09-02T20:15:38.677","2025-09-10T14:59:58.543",8.8,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":27},[],[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"zdi-disclosures@trendmicro.com","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","LOCAL","LOW","NONE","CHANGED","HIGH",null,2,6,[],0.00152,[31,31,31,31,31,31,31],"High",[35,40],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"realtek","wi-fi_usb_driver","*","cpe:2.3:a:realtek:wi-fi_usb_driver:*:*:*:*:*:windows:*:*",{"vendor":36,"product":41,"version":42,"criteria":43,"vulnerable":44},"rtl8811au","-","cpe:2.3:h:realtek:rtl8811au:-:*:*:*:*:*:*:*",false,[46],{"url":47,"source":48,"tags":49},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-882\u002F","Zerodayinitiative",[50],"Third Party Advisory",1,[53],{"id":54,"name":55,"description":56,"extendedDescription":57,"status":58,"abstraction":59,"structure":60},"CWE-122","Heap-based Buffer Overflow","A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().","","Draft","Variant","Simple",[],{"title":63,"metaDescription":64,"keywords":65,"canonicalUrl":66,"structuredData":67},"What is CVE-2025-8299? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-8299, a high severity cyber security vulnerability from 2025. Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PA...","CVE-2025-8299, CVE-2025-8299 vulnerability, CVE-2025-8299 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, realtek security, wi-fi_usb_driver vulnerability, rtl8811au vulnerability","\u002Fwhat-is\u002Fcve-2025-8299",{"@context":68,"@type":69,"headline":63,"description":64,"datePublished":10,"dateModified":11,"author":70,"publisher":74,"about":78,"mainEntityOfPage":82,"articleSection":85,"keywords":86},"https:\u002F\u002Fschema.org","TechArticle",{"@type":71,"name":72,"url":73},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":71,"name":72,"url":73,"logo":75},{"@type":76,"url":77},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":79,"name":6,"description":80,"additionalType":81},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":83,"@id":84},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-8299","Cybersecurity","CVE-2025-8299, CVE-2025-8299 vulnerability, CVE-2025-8299 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[88],{"Operator":89,"Negate":27,"Nodes":90},"AND",[91,97],{"Operator":92,"Negate":44,"CPEMatch":93},"OR",[94],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":95,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":96,"VersionEndIncluding":27},"64315E56-CCBD-46FE-AE2C-185A856157BA","1030.52.0325.2025",{"Operator":92,"Negate":44,"CPEMatch":98},[99],{"Vulnerable":44,"Criteria":43,"MatchCriteriaID":100,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"884B566E-208D-47EE-AFCF-56D0D2C91B4F",[],[103],{"id":104,"eventType":105,"eventTime":106,"details":107,"label":108,"color":109},"7aa021b3-127c-408e-a889-6833ed3f364c","NEW_NVD","2025-09-03T04:01:07.645381+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":111,"version":112},1792272340975,"2.0",{"score":114,"band":115,"action":116,"scoredAt":117},47,"Medium","Plan remediation","2026-10-16T07:08:40.26289+00:00"]