ACTIVELY EXPLOITED
CVE-2021-35394: Realtek Jungle SDK Remote Code Execution Vulnerability
| Vendor | Realtek |
|---|---|
| Product | Jungle Software Development Kit (SDK) |
| Actively exploited | Yes |
| Added to CISA KEV | 10 Dec 2021 |
| CISA federal deadline | 24 Dec 2021 |
| Weakness (CWE) | CWE-138, CWE-78 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution.
SOURCES
Other Realtek flaws
- CVE-2014-8361: Realtek SDK Improper Input Validation Vulnerability
- CVE-2021-35395: Realtek AP-Router SDK Buffer Overflow Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.