CVE-2025-8298
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-02

Last updated on: 2025-09-10

Assigner: Zero Day Initiative

Description
Realtek RTL8811AU rtwlanu.sys N6CQueryInformationHandleCustomized11nOids Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of Realtek RTL8811AU drivers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the N6CQueryInformationHandleCustomized11nOids function. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel. Was ZDI-CAN-25864.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-02
Last Modified
2025-09-10
Generated
2026-06-16
AI Q&A
2025-09-02
EPSS Evaluated
2026-06-15
NVD
CVE-2025-8298
EUVD
EUVD-2025-26432
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
realtek wi-fi_usb_driver to 1030.52.0325.2025 (exc)
realtek rtl8811au *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-8298 is an information disclosure vulnerability in the Realtek RTL8811AU wireless driver, specifically in the function N6CQueryInformationHandleCustomized11nOids. The flaw is caused by improper validation of user-supplied data, which leads to an out-of-bounds read past the end of an allocated buffer. An attacker must have the ability to execute low-privileged code locally to exploit this vulnerability. While it primarily allows disclosure of sensitive information, it can be combined with other vulnerabilities to execute arbitrary code with kernel-level privileges. [1]

Impact Analysis

This vulnerability can allow a local attacker with low privileges to disclose sensitive information from the affected system. Additionally, if combined with other vulnerabilities, it could enable the attacker to execute arbitrary code with kernel-level privileges, potentially leading to full system compromise. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-8298. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart