{"id":"CVE-2024-45383","aliases":["EUVD-2024-41453","GHSA-66wp-pmr8-89fq"],"status":"published","title":"A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft...","description":"A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability.","severity":{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01545,"percentile":0.75198,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-664"],"published":"2024-09-12T18:19:23Z","modified":"2026-06-17T07:54:06Z","exploits":[{"source":"pocgithub","id":"SpiralBL0CK/CVE-2024-45383","title":"SpiralBL0CK/CVE-2024-45383","date":"2024-09-18","url":"https://github.com/SpiralBL0CK/CVE-2024-45383"}],"products":[{"vendor":"microsoft","product":"hdaudbus.sys"},{"vendor":"microsoft","product":"high_definition_audio_bus_driver"}],"references":[{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2024-2008","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2008"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45383"},{"url":"https://github.com/advisories/GHSA-66wp-pmr8-89fq"}],"sources":{"cve":[{"id":"CVE-2024-45383","description":"A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability.","status":"published","published":"2024-09-12T18:19:23.682Z","modified":"2024-09-13T19:03:10.251Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-664"],"updated_at":"2026-11-02T14:34:08.500935Z"}],"euvd":[{"id":"EUVD-2024-41453","description":"A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability.","status":"published","published":"2024-09-12T18:19:23Z","modified":"2024-09-13T19:03:10Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:55:55.02611Z"}],"ghsa":[{"id":"GHSA-66wp-pmr8-89fq","title":"A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft...","description":"A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability.","status":"published","published":"2024-09-12T21:32:02Z","modified":"2024-09-12T21:32:02Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-664"],"updated_at":"2026-11-02T14:58:15.26738Z"}],"nvd":[{"id":"CVE-2024-45383","description":"A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability.","status":"published","published":"2024-09-12T19:15:04.01Z","modified":"2026-06-17T07:54:06.457Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-664"],"updated_at":"2026-11-02T14:10:26.717759Z"}]}}