CVE-2019-11867

Name of the Vulnerable Software and Affected Versions Realtek NDIS driver rt640x64.sys version 10.1.505.2015

Description The issue arises from the driver's failure to perform size checking on an input buffer from user space, assuming it has a size greater than zero bytes. An attacker can exploit this by sending an IRP with a system buffer size of 0.

Recommendations For Realtek NDIS driver rt640x64.sys version 10.1.505.2015, consider disabling the driver until a patch is available to prevent exploitation.