CVE-2019-19705

HIGH

Realtek Audio Drivers - DLL Preloading

Title source: llm
STIX 2.1

Description

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.

Scores

CVSS v3 7.8
EPSS 0.0013
EPSS Percentile 32.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-428
Status published
Products (50)
lenovo/aio300-23isu_firmware < 6.0.8881.1
lenovo/aio310-20iap_firmware < 6.0.8881.1
lenovo/aio510-22ish_firmware < 6.0.8881.1
lenovo/aio510-23ish_firmware < 6.0.8881.1
lenovo/aio520-22ikl_firmware < 6.0.8881.1
lenovo/aio520-22iku_firmware < 6.0.8881.1
lenovo/aio520-24ikl_firmware < 6.0.8881.1
lenovo/aio520-24iku_firmware < 6.0.8881.1
lenovo/aio520-27ikl_firmware < 6.0.8881.1
lenovo/aio720-24ikb_firmware < 6.0.8881.1
... and 40 more
Published Dec 26, 2022
Tracked Since Feb 18, 2026