The vulnerability resides in the sys_getaddrinfo function in the lwp_syscall.c file of RT‑Thread firmware; it is a buffer overflow (CWE‑119). Manipulating the ai_addr argument can cause a buffer overrun, corrupting memory beyond the intended bounds. The CVE record does not state that the overflow directly grants code execution. The primary danger is the resulting memory corruption, which may impair system stability; it is inferred that such corruption could potentially be leveraged as part of a larger attack strategy, although this inference is not explicitly stated in the CVE description.

Devices that run RT‑Thread versions up to and including 5.0.2 are affected because the flaw is present in the firmware binary. Any system that incorporates the unpatched sys_getaddrinfo routine can be compromised by an attacker who can execute code locally on the target device.

The CVSS score of 6.8 classifies this issue as medium severity. The EPSS score of less than 1 % indicates a low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Attacks require local execution privileges to trigger the defect; no remote exploitation path is documented. Publicly available exploit code demonstrates that local attackers could use the flaw to corrupt memory, potentially disrupting device operation. It is inferred that this could provide a foothold for additional attacks, though this inference is not explicitly stated in the CVE description.