CVE-2019-19705

HIGH

Realtek Audio Drivers - DLL Preloading

Title source: llm

Description

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.

References (1)

Core 1

Core References

Vendor Advisory

https://support.lenovo.com/us/en/product_security/ps500315-realtek-audio-driver-vulnerability

Scores

CVSS v3 7.8

EPSS 0.0013

EPSS Percentile 32.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-428

Status published

Products (50)

lenovo/aio300-23isu_firmware < 6.0.8881.1

lenovo/aio310-20iap_firmware < 6.0.8881.1

lenovo/aio510-22ish_firmware < 6.0.8881.1

lenovo/aio510-23ish_firmware < 6.0.8881.1

lenovo/aio520-22ikl_firmware < 6.0.8881.1

lenovo/aio520-22iku_firmware < 6.0.8881.1

lenovo/aio520-24ikl_firmware < 6.0.8881.1

lenovo/aio520-24iku_firmware < 6.0.8881.1

lenovo/aio520-27ikl_firmware < 6.0.8881.1

lenovo/aio720-24ikb_firmware < 6.0.8881.1

... and 40 more

Published Dec 26, 2022

Tracked Since Feb 18, 2026