CVE-2023-1640: medium-severity vulnerability in IObit Malware Fighter
IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of service
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.3%
A vulnerability classified as problematic was found in IObit Malware Fighter 9.4.0.776. This vulnerability affects the function 0x222010 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224020.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
IObit · Malware FighterRelated CVEs — IObit Malware Fighter
In the same product, most dangerous first.
CVE-2023-1646MEDIUMIObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflowEPSS 0.4%CVE-2023-1643MEDIUMIObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of serviceEPSS 0.3%CVE-2023-1641MEDIUMIObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of serviceEPSS 0.3%CVE-2023-1639MEDIUMIObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of serviceEPSS 0.3%CVE-2023-1638MEDIUMIObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of serviceEPSS 0.3%CVE-2023-1645MEDIUMIObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E008 denial of serviceEPSS 0.3%