CVE-2019-8372

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory…

published February 18, 2019

CVSS
—
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link and an open DACL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00537 · 44.4th percentile
Published
2019-02-18T15:00Z
EPSS history
Timeline
  • 18 FEB 15:00Z
    The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory…
    cvelistv5