// For flags

CVE-2021-32537

Realtek High definition audio Windows driver crashed

Severity Score

6.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a user’s mode. Due to unexpected commands, the kernel driver will cause the system crashed.

Realtek HAD contiene una vulnerabilidad de bloqueo del controlador que permite a los atacantes del lado local enviar una cadena especial al controlador del kernel en un modo de usuario. Debido a los comandos inesperados, el controlador del kernel hará que el sistema se bloquee

*Credits: Realtek
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-05-10 CVE Reserved
  • 2021-07-07 CVE Published
  • 2021-07-14 First Exploit
  • 2024-09-17 CVE Updated
  • 2024-10-23 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Realtek
Search vendor "Realtek"
 Hda Driver
Search vendor "Realtek" for product "Hda Driver"
 >= 8155 <= 9150
Search vendor "Realtek" for product "Hda Driver" and version " >= 8155 <= 9150"
-
Affected