Dynabook Bluetooth ACPI Drivers Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in the Bluetooth ACPI drivers TOSRFEC.SYS (all versions) and DRFEC.SYS (versions prior to 11.0.0.0) provided by Dynabook Inc. This vulnerability allows an attacker to execute arbitrary code by modifying specific registry values.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users are advised to update the Bluetooth ACPI driver to the latest version. For TOSRFEC.SYS, update to DRFEC.SYS version 11.0.2.3 or later. Note that updating TOSRFEC.SYS will automatically replace it with DRFEC.SYS. For DRFEC.SYS, update to version 11.0.2.3 or later.