Description
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Silicon Labs | silabser.sys driver | ≤ 11.5.0 | — |
References
- https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000100HA6IAM?operationContext=S1 vendor-advisory permissions-required