Realtek SD Card Reader Driver Security Update

Potential vulnerabilities have been identified in the HP PC products that are configured with certain Realtek SD card readers, which might allow escalation of privilege or information disclosure. Updated Realtek SD card reader drivers have been released for mitigation. Realtek has released update...

CVE-2024-40431

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTLSCSIPASSTHROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user...

CVE-2024-40432

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTLSFFDISKDEVICECOMMAND control of the SD card reader driver allows a privileged attacker to crash the OS...

CVE-2023-32661

Improper authentication in some IntelR NUC Kits NUC7PJYH and NUC7CJYH Realtek SD Card Reader Driver installation software before version 10.0.19041.29098 may allow an authenticated user to potentially enable escalation of privilege via local access...

RealTek SD Card Reader Vulnerabilities - Lenovo Support US

No description provided...

CVE-2024-40432

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTLSFFDISKDEVICECOMMAND control of the SD card reader driver allows a privileged attacker to crash the OS...

CVE-2024-40432: Undefined Security Weakness

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTLSFFDISKDEVICECOMMAND control of the SD card reader driver allows a privileged attacker to crash the OS...

CVE-2024-40432

The Realtek SD card reader driver (specifically RtsPer.sys ) is vulnerable to a lack of input validation and a buffer overflow before version 10.0.26100.21374 . The issue resides in the implementation of the IOCTL_SFFDISK_DEVICE_COMMAND control, which allows a privileged attacker to write data in...

CVE-2024-40431: Undefined Security Weakness

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTLSCSIPASSTHROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user...

CVE-2023-32661

Improper authentication in some IntelR NUC Kits NUC7PJYH and NUC7CJYH Realtek SD Card Reader Driver installation software before version 10.0.19041.29098 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-23941

Name of the Vulnerable Software and Affected Versions IntelR NUC Kits NUC7PJYH and NUC7CJYH Realtek SD Card Reader Driver installation software versions prior to 10.0.19041.29098 Description The issue is related to improper authentication in the Realtek SD Card Reader Driver installation software...

CVE-2023-32661: Improper Authentication

Improper authentication in some IntelR NUC Kits NUC7PJYH and NUC7CJYH Realtek SD Card Reader Driver installation software before version 10.0.19041.29098 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-7671

Name of the Vulnerable Software and Affected Versions Realtek SD card reader affected versions not specified Description The issue is related to insufficient input validation in the RtsPer.sys driver of Realtek SD card reader devices. This can be exploited to gain unauthorized access to the DMA...