CVE-2019-11867 | BDVDB-2026-130773 Detail

Description#

Realtek NDIS driver rt640x64.sys, file version 10.1.505.2015, fails to do any size checking on an input buffer from user space, which the driver assumes has a size greater than zero bytes. To exploit this vulnerability, an attacker must send an IRP with a system buffer size of 0.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12020-02-12Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.