PT-2024-9820

CVE-2024-45383

·

Published

2024-06-24

·

Updated

2024-10-01

Description by

CVSS 3.1
5.0
Medium
MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Microsoft High Definition Audio Bus Driver version 10.0.19041.3636
Description: A mishandling of IRP requests vulnerability exists in the HDAudBus DMA interface of Microsoft High Definition Audio Bus Driver. This vulnerability can be exploited by a specially crafted application issuing multiple IRP Complete requests, leading to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability, potentially allowing the execution of arbitrary code or causing a denial-of-service.
Recommendations: For Microsoft High Definition Audio Bus Driver version 10.0.19041.3636, patch the driver to mitigate the local attack risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾