Buffer Overflow Vulnerability in KINGSOFT Internet Security
CVE-2022-25949
7.8HIGH
Key Information:
- Vendor
Kingsoft Japan, Inc.
- Vendor
- CVE Published:
- 17 March 2022
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2022-25949?
A vulnerability exists in the kernel mode driver 'kwatch3' of KINGSOFT Internet Security 9 Plus where crafted inputs can lead to a stack-based buffer overflow. This weakness allows attackers to exploit the mishandling of inputs, potentially compromising system stability and security.
Affected Version(s)
KINGSOFT Internet Security 9 Plus Reported for Version 2010.06.23.247
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.