Null Pointer Dereference Vulnerability in IOBit Protected Folder Software
CVE-2025-0221
Key Information:
- Vendor
- Iobit
- Status
- Protected Folder
- Vendor
- CVE Published:
- 5 January 2025
Badges
Summary
A vulnerability exists in IOBit Protected Folder up to version 1.3.0, specifically in the IOCTL Handler's pffilter.sys library function 0x22200c. This flaw allows for a null pointer dereference, which can lead to system instability or a denial-of-service condition when exploited. The vulnerability requires local access to the system for exploitation. Despite early notification, the vendor has not responded to the disclosure of this issue, leaving users at potential risk.
Affected Version(s)
Protected Folder 1.0
Protected Folder 1.1
Protected Folder 1.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved