Null Pointer Dereference Vulnerability in IObit Advanced SystemCare Ultimate
CVE-2024-12657

5.5MEDIUM

Key Information:

Vendor

IObit

Status
Advanced Systemcare Ultimate
Vendor
CVE Published:
16 December 2024

What is CVE-2024-12657?

A significant vulnerability identified in IObit Advanced SystemCare Ultimate, specifically impacting versions up to 17.0.0. This vulnerability involves a null pointer dereference within the IOCTL Handler function (0x8001E000) located in the AscRegistryFilter.sys library. Exploitation requires local access, making it critical for users to apply security measures immediately to mitigate potential threats, especially since the vulnerability has been publicly disclosed and may already be exploited. Despite early notification, IObit has not responded regarding this security issue, raising concerns about user safety.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://shareforall.notion.site/IOBit-Advanced-SystemCare...
https://vuldb.com/?ctiid.288526
https://vuldb.com/?id.288526

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.