Toshiba/Dynabook Bluetooth Driver Stack Buffer Overflow (CVE-2026-3553)

Toshiba/Dynabook Bluetooth Driver Security Vulnerability Summary Vulnerability Overview Vulnerability Name: Bluetooth ACPI Driver Stack Buffer Overflow Vulnerability Affected Drivers: TOSRFEC.SYS and DRFEC.SYS Vulnerability Type: Stack Buffer Overflow CVSS Scores: CVSS:4.0 (AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) – Base Score 8.4 CVSS:3.1 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) – Base Score 6.7 CVE ID: CVE-2026-3553 CWE ID: CWE-121 (Stack-based Buffer Overflow) Potential Impact: An attacker can execute arbitrary code by modifying specific register values. Affected Scope Affected Products: Certain Toshiba/Dynabook PCs manufactured from 2017 to April 2022. Affected Driver Versions: TOSRFEC.SYS: All versions. DRFEC.SYS: Versions prior to v11.0.0.0. Specific Model List: PLR31 / PLR33 / PLR34 / PMR30 / PMR31 / PMR33 / PMZ10 / PMZ11 / PMZ12 / PT20 / PT22 / PT23 / PT24 / PS591 / PS 592 / PS595 / PS596 / PS597 / PS599 / PS59A / PS59B / PS59M / PSA1 / PSZ10 / PSZ11 / PSZ12 / PSZ14 / PT17A / PT17C / PT17D / PT17E / PT17G / PT281 / PT282 / PT284 / PT291 / PT293 / PT294 / PT295 / PT296 / PT297 / PT2AL / PT2A2 / PT2A3 / PT481 / PT482 / PT484 / PT591 / PT592 / PT593 / PT5A1 / PT5A2 / PT5A3 / PUR30 / PUR31 / PUR33 / PUR34 Remediation Update Drivers: Update to the latest Bluetooth ACPI driver via Windows Update. Specific Version Requirements: TOSRFEC.SYS: Update to v11.0.2.3 or later. DRFEC.SYS: Update to v11.0.2.3 or later. Note: Updating TOSRFEC.SYS will automatically change DRFEC.SYS to the updated version. Support Page**: https://dynabook.com/assistpc/info/2026/20260410_security.htm

Goal Reached Thanks to every supporter — we hit 100%!

Toshiba/Dynabook Bluetooth Driver Stack Buffer Overflow (CVE-2026-3553)