Null Pointer Dereference Vulnerability in IObit Advanced SystemCare Ultimate
CVE-2024-12659

5.5MEDIUM

Key Information:

Vendor

IObit

Status
Advanced Systemcare Ultimate
Vendor
CVE Published:
16 December 2024

What is CVE-2024-12659?

CVE-2024-12659 is a high-risk vulnerability discovered in IObit Advanced SystemCare Ultimate, specifically in the IOCTL Handler of the AscRegistryFilter.sys library. This vulnerability allows an attacker to exploit a null pointer dereference through function code 0x8001E004. Such exploitation can lead to system instability and may grant an attacker increased privileges. Local access is required for an exploit to be initiated, enhancing the risk to users who may be unaware of the vulnerability. IObit has been notified of this issue, but no response has been received, indicating potential risks to user systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://shareforall.notion.site/IOBit-Advanced-SystemCare...
https://vuldb.com/?ctiid.288528
https://vuldb.com/?id.288528

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.