Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_10_1507 | Microsoft | * | 10.0.10240.21161 (excluding) |
| Windows_10_1607 | Microsoft | * | 10.0.14393.8519 (excluding) |
| Windows_10_1809 | Microsoft | * | 10.0.17763.7919 (excluding) |
| Windows_10_21h2 | Microsoft | * | 10.0.19044.6456 (excluding) |
| Windows_10_22h2 | Microsoft | * | 10.0.19045.6456 (excluding) |
| Windows_11_22h2 | Microsoft | * | 10.0.22621.6060 (excluding) |
| Windows_11_23h2 | Microsoft | * | 10.0.22631.6060 (including) |
| Windows_11_24h2 | Microsoft | * | 10.0.26100.6899 (excluding) |
| Windows_11_25h2 | Microsoft | * | 10.0.26200.6899 (excluding) |
| Windows_server_2008 | Microsoft | –sp2 (including) | –sp2 (including) |
| Windows_server_2008 | Microsoft | r2-sp1 (including) | r2-sp1 (including) |
| Windows_server_2012 | Microsoft | - (including) | - (including) |
| Windows_server_2012 | Microsoft | r2 (including) | r2 (including) |
| Windows_server_2016 | Microsoft | * | 10.0.14393.8519 (including) |
| Windows_server_2019 | Microsoft | * | 10.0.17763.7919 (excluding) |
| Windows_server_2022 | Microsoft | * | 10.0.20348.4294 (excluding) |
| Windows_server_2022_23h2 | Microsoft | * | 10.0.25398.1913 (excluding) |
| Windows_server_2025 | Microsoft | * | 10.0.26100.6899 (including) |
An attacker can supply a pointer for memory locations that the product is not expecting. If the pointer is dereferenced for a write operation, the attack might allow modification of critical state variables, cause a crash, or execute code. If the dereferencing operation is for a read, then the attack might allow reading of sensitive data, cause a crash, or set a variable to an unexpected value (since the value will be read from an unexpected memory location). There are several variants of this weakness, including but not necessarily limited to: