Description
A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O control (IOCTL) interface that acts on a caller-supplied user-mode pointer without proper validation or capture. By issuing crafted property requests an attacker can obtain kernel-mode read and write access, which can be leveraged for local privilege escalation and arbitrary kernel code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Realtek | RtUsbA64.sys | 6.3.9600.2393 | — |