Vulnerability · Published Jul 7, 2021 · Assigned by twcert
CVE-2021-32537Realtek High definition audio Windows driver crashed
Medium 6.5
In plain English
A medium-severity security flaw in HDA driver from Realtek. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 61.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a user’s mode. Due to unexpected commands, the kernel driver will cause the system crashed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Realtek | HDA driver | 8155 – through 9150 |