A vulnerability, which was classified as critical, was found in RT-Thread up to 5.1.0. This affects the function
sys_device_open/sys_device_read/sys_device_control/sys_device_init/sys_device_close/sys_device_write of the file components/drivers/core/device.c. The manipulation leads to memory corruption.
This vulnerability is uniquely identified as CVE-2025-6693. It is possible to launch the attack on the local host. There is no exploit available.
The vendor was contacted early about this disclosure but did not respond in any way.
