English Community

Software and Operating SystemSecurity & Malware
All Forum Topics
Options

10 Posts

07-26-2015

Los Angeles, California, USA

8 Signins

48 Page Views

  • Posts: 10
  • Registered: ‎07-26-2015
  • Location: Los Angeles, California, USA
  • Views: 48
  • Message 11 of 12

Re:Lenovo on Realtek audio driver vulnerability CVE-2019-19705?

2020-06-06, 14:05 PM

@ olavrb wrote:
 

 

 

According to Realtek, drivers version 8855 and older are affected.

We have several Lenovo models with Realtek audio drivers where version number seems to indicate an older Realtek audio driver version than 8855, for instance Lenovo ThinkPad T470s (20HF0001MX) with driver updated 191014 with version number 6.0.8777.1.

 

Are Lenovo supplied drivers for Realtek Audio affected by CVE-2019-19705?

 

 

 

Lenovo has released a v6.0.8924.1 Realtek HD audio driver for Thinkpad T470s on May 14, olavrb [driver EXE download mis-labeled as 8777 when the n1wa118w package actually has 8924 as I checked the exe file contents myself after choosing the "extract only" option]
the v6.0.8924.1 Realtek HDA driver is also available from MS Update Catalog in late May 2020 (cab file download sizes are 149.4mb & 146.7mb which are generic & support many systems other than Lenovo - the other 10.5mb & 10.9mb size downloads for 8924 are UAD drivers so don't use those)

 

it would be nice if Lenovo could issue a 8934 or higher version instead of the 8924 version for other affected Lenovo systems that have not gotten an updated Realtek HDA driver.

 

--

 

and it looks like Dell has recently been aware of the Realtek audio driver security vulnerability and has published their security bulletin DSA-2020-131 close to the end of May.
Dell plans to release a v6.0.8934.1 HDA version for some of their affected systems later this June or July.

 

Reply
Options

10 Posts

07-26-2015

Los Angeles, California, USA

8 Signins

48 Page Views

  • Posts: 10
  • Registered: ‎07-26-2015
  • Location: Los Angeles, California, USA
  • Views: 48
  • Message 12 of 12

Re:Lenovo on Realtek audio driver vulnerability CVE-2019-19705?

2020-06-23, 18:09 PM

@ erpster-le0 wrote:
 

 

 

it would be nice if Lenovo could issue a 8934 or higher version instead of the 8924 version for other affected Lenovo systems that have not gotten an updated Realtek HDA driver.

 

 

 

 

 

and it seems Lenovo did release v6.0.8934.1 Realtek HDA drivers to Thinkpad L560, L570 and Yoga 15 models in late June.

 

Also Microsoft has also posted the v6.0.8934.1 Realtek HDA driver (in the 149.4mb cab download package that includes the generic HDXRT.inf file) on the MS Update Catalog site.

Reply
Forum Home

Community Guidelines

Please review our Guidelines before posting.

Learn More

Check out current deals!

Go Shop
X

Save

X

Delete