Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-40431. PoCs published by SpiralBL0CK.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for chaining CVE-2024-40431 and CVE-2022-25479 to achieve a data-only attack leading to elevation of privilege (EOP). The exploit leverages SCSI commands and PCI configuration reads/writes to manipulate kernel memory.
Description
A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SCSI_PASS_THROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user.
Exploits (1)
This repository contains a proof-of-concept exploit for chaining CVE-2024-40431 and CVE-2022-25479 to achieve a data-only attack leading to elevation of privilege (EOP). The exploit leverages SCSI commands and PCI configuration reads/writes to manipulate kernel memory.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H