{"id":"CVE-2025-5865","details":"A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sys_select of the file rt-thread/components/lwp/lwp_syscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor explains, that \"[t]he timeout parameter should be checked to check if it can be accessed correctly in kernel mode and used temporarily in kernel memory.\"","modified":"2026-04-10T05:31:32.578094Z","published":"2025-06-09T07:15:22.660Z","references":[{"type":"ADVISORY","url":"https://vuldb.com/?id.311624"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.584124"},{"type":"REPORT","url":"https://github.com/RT-Thread/rt-thread/issues/10298"},{"type":"REPORT","url":"https://github.com/RT-Thread/rt-thread/issues/10298#issuecomment-2894952150"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.311624"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/RT-Thread/rt-thread","events":[{"introduced":"0"},{"last_affected":"4f7940167d172858e37373bc330c7093e8765d5b"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"5.1.0"}]}}],"versions":["v1.2.0","v2.0.0","v2.0.0_alpha","v2.0.0_beta","v2.0.0_rc","v2.1.0","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.0.4","v3.1.0","v3.1.1","v4.0.0","v4.0.1","v4.0.2","v4.0.3","v4.1.0","v4.1.0-beta","v4.1.1","v4.1.1-beta","v5.0.0","v5.0.1","v5.0.2","v5.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5865.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}