Unrated severityNVD Advisory· Published Nov 2, 2021· Updated Aug 4, 2024
CVE-2021-36925
CVE-2021-36925
Description
RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write operation from/to physical memory (leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.
Affected products
2- Realtek/RtsUpx USB Utility Driverdescription
- Range: <=1.14.0.0
Patches
Vulnerability mechanics
References
2- www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdfmitrex_refsource_MISC
- www.sentinelone.com/resources/category/report/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.