PT-2024-9820 · Microsoft · High Definition Audio Bus Driver

Icewall

+2

·

Published

2024-06-24

·

Updated

2024-10-01

·

CVE-2024-45383

CVSS v3.1

5.0

Medium

VectorAV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Microsoft High Definition Audio Bus Driver version 10.0.19041.3636
Description: A mishandling of IRP requests vulnerability exists in the HDAudBus DMA interface of Microsoft High Definition Audio Bus Driver. This vulnerability can be exploited by a specially crafted application issuing multiple IRP Complete requests, leading to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability, potentially allowing the execution of arbitrary code or causing a denial-of-service.
Recommendations: For Microsoft High Definition Audio Bus Driver version 10.0.19041.3636, patch the driver to mitigate the local attack risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-664

Related Identifiers

BDU:2024-11596
CVE-2024-45383

Affected Products

High Definition Audio Bus Driver