CVE-2023-41251

HighCVSS 7.2

Published: 08/07/2024(UTC)Updated: 03/11/2026(UTC)Translated: 04/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.28%

70th percentile - higher than 70% of all known CVEs

Summary

A stack-based buffer overflow exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution.

Risk Assessment

An attacker could remotely execute arbitrary code on a device running the vulnerable SDK, potentially taking control of the network device.

Recommendation

Update Realtek rtl819x Jungle SDK to a non-vulnerable version and restrict access to device HTTP interfaces.

Other vulnerabilities in Realtek rtl819x Jungle SDK

CVE-2026-36355High
The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (ioctl 0x89F5) and read_mem (ioctl 0x89F6) debug handlers, which are compiled into production builds via the unconditionally defined _IOCTL_DEBUG_CMD_ macro in 8192cd_cfg.h.

Original NVD description (English source)

A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS