NetSight
medium6.5

CVE-2024-40432

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SFFDISK_DEVICE_COMMAND control of t…

Impact

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SFFDISK_DEVICE_COMMAND control of the SD card reader driver allows a privileged attacker to crash the OS.

Affected products

ProductAffected versions
Realtek SD Card Reader Driver
before 10.0.26100.21374

Versions were read from the advisory text. No structured product data has been published for this record yet.

References