CVE-2021-35394VulnerabilityPublished 12/10/2021Updated 10/24/2026

CVE-2021-35394: Realtek Jungle SDK Remote Code Execution Vulnerability

Affects Realtek Jungle Software Development Kit (SDK)Source CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 12/10/2021
KEV deadline: 12/24/2021
EPSS: 99.9% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-35394 (opens in a new tab)

Description

Realtek Jungle SDK contains multiple memory corruption vulnerabilities that allow remote code execution by attackers. These vulnerabilities have been exploited in the wild. No specific affected versions or patch information is provided.

Summary

CVE-2021-35394 identifies multiple memory corruption vulnerabilities in the Realtek Jungle Software Development Kit (SDK) that enable remote code execution. The vulnerabilities are associated with weaknesses classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command) and CWE-138 (Improper Handling of Exception Conditions). Exploits leveraging these vulnerabilities have been observed in the wild, indicating active threat use. However, no vendor advisory or patch information is available to confirm remediation status or affected versions.

Impact

Successful exploitation of these memory corruption vulnerabilities can lead to remote code execution, allowing attackers to execute arbitrary code on affected systems. This poses a high risk to confidentiality, integrity, and availability of impacted environments. The presence of known exploits in the wild increases the urgency of addressing this issue.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official fixes are available, organizations should monitor for vendor updates and consider applying any recommended workarounds or mitigations provided by Realtek. Due to lack of specific guidance, no further targeted mitigations can be recommended at this time.

CVE-2021-35394: Realtek Jungle SDK Remote Code Execution Vulnerability

What to do

Description

Summary

Impact

Mitigation

Weaknesses

References

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:56:04 UTC

Weaknesses

References

Related threats