CVE-2023-1626CWE-119

Jianming Antivirus IoControlCode kvcore.sys memory corruption

Medium · published March 25, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affects unknown code in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224008.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00336 · 25.7th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2023-03-25T10:31Z
EPSS history
Timeline
  • 25 MAR 10:31Z
    Jianming Antivirus IoControlCode kvcore.sys memory corruption
    cvelistv5