Every CVE Search/ Get API key

CVE-2026-122113

CVE-2026-122113

No score

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously crafted USB device to trigger unbounded recursion in the driver's topology-parsing logic during device enumeration. Processing the crafted descriptor exhausts the kernel stack and causes a system crash (bugcheck), resulting in a denial of service. No authenticated user session is required.

What each source reports

CVE List No score

CVE-2026-122113

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously crafted USB device to trigger unbounded recursion in the driver's topology-parsing logic during device enumeration. Processing the crafted descriptor exhausts the kernel stack and causes a system crash (bugcheck), resulting in a denial of service. No authenticated user session is required.

Record
CVE-2026-122113
Updated
2026-11-06
EUVDEUVD-2026-118417 No score

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously crafted USB device to trigger unbounded recursion in the driver's topology-parsing logic during device enumeration. Processing the crafted descriptor exhausts the kernel stack and causes a system crash (bugcheck), resulting in a denial of service. No authenticated user session is required.

Record
EUVD-2026-118417
Updated
2026-11-07
GitHub AdvisoriesGHSA-243x-4g43-9fcq No score

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker...

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously crafted USB device to trigger unbounded recursion in the driver's topology-parsing logic during device enumeration. Processing the crafted descriptor exhausts the kernel stack and causes a system crash (bugcheck), resulting in a denial of service. No authenticated user session is required.

Record
GHSA-243x-4g43-9fcq
Updated
2026-11-06
NVD No score

A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously crafted USB device to trigger unbounded recursion in the driver's topology-parsing logic during device enumeration. Processing the crafted descriptor exhausts the kernel stack and causes a system crash (bugcheck), resulting in a denial of service. No authenticated user session is required.

Record
CVE-2026-122113
Updated
2026-11-06

Affected products

History

History
RecordedChangedSources
publishedEUVD
publishedEUVD, NVD
aliases, referencesGitHub Advisories
aliases, publishedEUVD
first indexedCVE List

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-122113 is a vulnerability with no CVSS score yet in Realtek Rtusba64.sys, published November 6, 2026. No source lists public exploit code. No source names a fixed version.

References

MoveEnter Open