CVE-2025-68921

CVE-2025-68921 在许多游戏笔记本电脑上预装的音频增强软件 Nahimic 中存在一个本地权限提升漏洞。该漏洞允许低权限用户将权限提升至 NT AUTHORITY\SYSTEM。 该漏洞已报告给 Lenovo PSIRT，跟踪编号为 LEN-18785，并在修复后被分配为 CVE-2025-68921。 https://nvd.nist.gov/vuln/detail/CVE-2025-68921 视频 https://youtu.be/HqZR0RXFU48 漏洞分析 https://www.hackandhide.com/cve-2025-68921/...

CVE-2025-68921

CVE-2025-68921 在 Nahimic（一款预装在众多游戏笔记本电脑上的音频增强软件）中存在一个本地权限提升漏洞。该问题允许低权限用户将权限提升至 NT AUTHORITY\SYSTEM。 此漏洞已报告给 Lenovo PSIRT，跟踪编号为 LEN-18785，并在修复后被分配为 CVE-2025-68921。 https://nvd.nist.gov/vuln/detail/CVE-2025-68921 视频 https://youtu.be/HZqR0RXFU48 分析文章 https://www.hackandhide.com/cve-2025-68921/...

SectopRAT Abuses Legitimate Audio Software Files to Steal PC Data

FortiGuard found SectopRAT hidden in modified audio software files, using staged loading to steal browser data and remotely control infected Windows PCs...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Airplay_Audio_Software_Development_Kit

LiberationPlay-CVE-2025-24...

CVE-2020-36959

IDT PC Audio 1.0.6499.0 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the STacSV service to inject malicious code that would execute with LocalSystem account...

CVE-2023-33878

Path transversal in some IntelR NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-12392 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in Audio, which occurs when the START command is called multiple times on host voice PCM for the same RX or TX tap points. Recommendations: At the...

PT-2023-17637 · Mediatek +1 · Mt6779 +1

Name of the Vulnerable Software and Affected Versions: Audio software affected versions not specified Description: The issue is related to a missing bounds check in the audio component, which could lead to an out of bounds write. This might result in local escalation of privilege, requiring Syste...

GSD-2022-1007876 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()

ALSA: usb-audio: Drop sndBUGON from sndusbmidioutputopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

PT-2022-21412 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to a logic error that can cause memory corruption in audio. This could potentially lead to local escalation of privilege, with the requirement of System execution...