VYPR
Unrated severityNVD Advisory· Published Nov 2, 2021· Updated Aug 4, 2024

CVE-2021-36923

CVE-2021-36923

Description

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions (leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.

Affected products

2
  • Realtek/RtsUpx USB Utility Driverdescription
  • Realtek/RtsUpxllm-create
    Range: <=1.14.0.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.