GHSA-243x-4g43-9fcqMediumCVSS 4.3

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker...

Published
November 6, 2026
Last Modified
November 10, 2026

🔗 CVE IDs covered (1)

📋 Description

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously crafted USB device to trigger unbounded recursion in the driver's topology-parsing logic during device enumeration. Processing the crafted descriptor exhausts the kernel stack and causes a system crash (bugcheck), resulting in a denial of service. No authenticated user session is required.

🔗 References (3)