CVE-2019-19705

published 2022-12-26

CVE-2019-19705: Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1…

Priority P4 32 high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.

Affected

138 ranges · showing 25

Vendor	Product	Version range	Fixed in
lenovo	aio300-23isu_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	aio310-20iap_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	aio510-22ish_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	aio510-23ish_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	aio520-22ikl_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	aio520-22iku_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	aio520-24ikl_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	aio520-24iku_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	aio520-27ikl_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	aio720-24ikb_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	aio_910-27ish_firmware	< 6.0.8924.1	6.0.8924.1
lenovo	aio_y910-27ish_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	ideacentre_300s-11ish_firmware	< 6.0.8924.1	6.0.8924.1
lenovo	ideacentre_310-15asr_firmware	< 6.0.8924.1	6.0.8924.1
lenovo	ideacentre_310-15iap_firmware	< 6.0.8924.1	6.0.8924.1
lenovo	ideacentre_310a-15iap_firmware	< 6.0.8924.1	6.0.8924.1
lenovo	ideacentre_310s-08iap_firmware	< 6.0.8924.1	6.0.8924.1
lenovo	ideacentre_510-15abr_firmware	< 6.0.8924.1	6.0.8924.1
lenovo	ideacentre_510-15ikl_firmware	< 6.0.8923.1	6.0.8923.1
lenovo	ideacentre_510s-08ikl_firmware	< 6.0.8923.1	6.0.8923.1
lenovo	ideacentre_510s-08ish_firmware	< 6.0.8924.1	6.0.8924.1
lenovo	ideacentre_520s-23iku_firmware	< 6.0.8881.1	6.0.8881.1
lenovo	ideacentre_610s-02ish_firmware	< 6.0.8924.1	6.0.8924.1
lenovo	ideacentre_620s-03ikl_firmware	< 6.0.8924.1	6.0.8924.1
lenovo	ideacentre_700_firmware	< 6.0.8924.1	6.0.8924.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-428