CVE-2024-40431

HIGH

Realtek <10.0.26100.21374 - Memory Corruption

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-40431. PoCs published by SpiralBL0CK.

AI-analyzed exploit summary This repository contains a proof-of-concept exploit for chaining CVE-2024-40431 and CVE-2022-25479 to achieve a data-only attack leading to elevation of privilege (EOP). The exploit leverages SCSI commands and PCI configuration reads/writes to manipulate kernel memory.

Description

A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SCSI_PASS_THROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user.

Exploits (1)

nomisec WORKING POC 45 stars
by SpiralBL0CK · poc
https://github.com/SpiralBL0CK/CVE-2024-40431-CVE-2022-25479-EOP-CHAIN

This repository contains a proof-of-concept exploit for chaining CVE-2024-40431 and CVE-2022-25479 to achieve a data-only attack leading to elevation of privilege (EOP). The exploit leverages SCSI commands and PCI configuration reads/writes to manipulate kernel memory.

Classification
Working Poc 90%
Attack Type
Lpe
Complexity
Complex
Reliability
Reliable
Target: Windows kernel (Realtek driver vulnerability)
No auth needed
Prerequisites: Presence of vulnerable Realtek driver · Local access to the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0127
EPSS Percentile 66.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

Status published
Published Oct 23, 2024
Tracked Since Feb 18, 2026