High severity7.8NVD Advisory· Published Nov 2, 2021· Updated Jun 17, 2026
CVE-2021-36925
CVE-2021-36925
Description
RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write operation from/to physical memory (leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.
Affected products
3cpe:2.3:a:realtek:rtsupx_usb_utility_driver:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:realtek:rtsupx_usb_utility_driver:*:*:*:*:*:*:*:*range: <=1.14.0.0
- (no CPE)range: <=1.14.0.0
- Realtek/RtsUpx USB Utility Driverdescription
Patches
Vulnerability mechanics
References
2- www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdfnvdVendor Advisory
- www.sentinelone.com/resources/category/report/nvdNot Applicable
News mentions
0No linked articles in our index yet.