CVE-2024-45383
Published: 12 September 2024
Summary
CVE-2024-45383 is a medium-severity Improper Control of a Resource Through its Lifetime (CWE-664) vulnerability in Microsoft High Definition Audio Bus Driver. Its CVSS base score is 5.0 (Medium).
Operationally, ranked in the top 7.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The vulnerability is a mishandling of IRP requests in the HDAudBus_DMA interface of the Microsoft High Definition Audio Bus Driver version 10.0.19041.3636. A specially crafted local application can issue multiple IRP Complete requests against this interface, triggering a denial-of-service condition that affects system availability. The issue is tracked as CWE-664 and carries a CVSS 3.1 score of 5.0 reflecting local access requirements.
An attacker who can execute a malicious script or application on an affected Windows system can reliably trigger the flaw to crash or destabilize the audio subsystem and potentially broader system operations. No remote vector or privilege escalation is involved; the attack requires an authenticated local user context with the ability to run code.
Public references from Talos Intelligence detail the technical root cause in TALOS-2024-2008 but do not yet describe vendor patches or specific mitigation steps beyond general avoidance of untrusted local applications.
EPSS remains low and unchanged at 0.0850 with no observed rise after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-41453
Vulnerability details
A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can execute…
more
malicious script/application to trigger this vulnerability.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Requires a managed development lifecycle process with integrity controls on changes, improving control of resources throughout their lifetime.
Requires designing resource lifetime controls that anticipate, withstand, and recover from stresses or attacks, mitigating improper resource control.
Directly enforces limited resource lifetime by requiring initiation from a known state and explicit termination, shrinking the window any long-lived resource weakness can be exploited.