VYPR

RtUsbA64.sys

by Realtek

CVEs (2)

  • CVE-2026-90975Nov 6, 2026
    risk 0.00cvss —epss —

    A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O control (IOCTL) interface that acts on a caller-supplied user-mode pointer without proper validation or capture. By issuing crafted property requests an attacker…

  • CVE-2026-122113Nov 6, 2026
    risk 0.00cvss —epss —

    A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously crafted USB device to trigger unbounded recursion in the driver's topology-parsing logic during device enumeration. Processing the crafted descriptor exhausts the…