silabser.sys vulnerabilities

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges.

The silabser.sys driver for CP210x devices v11.5.0 and earlier allows a local unprivileged user with a malicious device to use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This affects Windows 10 and earlier.

The silabser.sys driver for CP210x devices on Windows 8 allows a local unprivileged user to use incorrect driver settings to cause a kernel crash.