The Bluetooth ACPI Drivers supplied by Dynabook contain a stack‑based buffer overflow that is triggered by modifying specific registry values. Improper bounds checking during registry processing allows an attacker to overflow the stack, enabling arbitrary code execution. This flaw jeopardises the confidentiality, integrity, and availability of the affected device by allowing execution of attacker‑controlled code.

The vulnerability affects Dynabook Inc. products DRFEC.SYS and TOSRFEC.SYS. No specific version ranges are listed, so any device running these drivers that has not applied an available update is potentially vulnerable.

With a CVSS base score of 8.4 the issue is classified as High severity. EPSS information is not available and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires the ability to alter registry settings, which may be achievable locally or via remote services with registry modification capabilities. The absence of publicly known exploits means the risk depends on an attacker’s ability to change those registry values, but the high CVSS score indicates a need for prompt attention.