CVE-2021-42205

Severity: medium (CVSS 4.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-07 · updated 2026-06-17
Weakness: CWE-703

Description

ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice.

Affected products

Lenovo Elan Miniport Touchpad Driver: before 24.21.51.2 — fixed in 24.21.51.2

How to fix

Upgrade to a fixed version: Lenovo Elan Miniport Touchpad Driver 24.21.51.2. Check the vendor advisory for mitigations.

References

https://www.emc.com.tw/upload/F2E/Vulnerability%20Report/Vulnerability%20Report_Miniport%20touchpad%20Windows%20driver_20221107.pdf
https://www.emc.com.tw/upload/F2E/Vulnerability%20Report/Vulnerability%20Report_Miniport%20touchpad%20Windows%20driver_20221107.pdf

Get alerted when CVE-2021-42205 or the next vulnerability affects your stack