CVE-2021-32537CWE-119

CVE-2021-32537

Medium · published July 7, 2021

CVSS v3.1
6.5
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a user’s mode. Due to unexpected commands, the kernel driver will cause the system crashed.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00440 · 37.2th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2021-07-07T18:15Z
Affected products (1)
ProductVersionsFixed in
realtek/hda_driver≥ 8155, ≤ 9150—
References (4)
http://packetstormsecurity.com/files/163498/Realtek-RTKVHD64.sys-Out-Of-Bounds-Access.html · [email protected]https://www.twcert.org.tw/tw/cp-132-4813-7b578-1.html · [email protected]http://packetstormsecurity.com/files/163498/Realtek-RTKVHD64.sys-Out-Of-Bounds-Access.html · af854a3a-2127-422b-91ae-364da2661108https://www.twcert.org.tw/tw/cp-132-4813-7b578-1.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 07 JUL 14:12Z
    Realtek High definition audio Windows driver crashed
    cvelistv5