PT-2024-7500 · Realtek · Realtek Sd Card Reader Driver

Published

2024-09-16

·

Updated

2024-11-05

·

CVE-2024-40431

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Realtek SD card reader driver versions prior to 10.0.26100.21374
Description: The issue is related to a buffer overflow in the RtsPer.sys driver, which can be exploited by an attacker to write to arbitrary kernel memory locations. This can be achieved through the IOCTL SCSI PASS THROUGH control of the SD card reader driver, even by a low-privileged user. The vulnerability affects laptops from various manufacturers, including Dell, Lenovo, HP, and MSI, and can risk system compromise by enabling kernel memory access.
Recommendations: For Realtek SD card reader driver versions prior to 10.0.26100.21374, update the driver to version 10.0.26100.21374 or higher to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable driver until a patch is applied. Avoid using the IOCTL SCSI PASS THROUGH control of the SD card reader driver until the issue is resolved.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2024-08883
CVE-2024-40431

Affected Products

Realtek Sd Card Reader Driver