CVE-2023-1645: medium-severity vulnerability in IObit Malware Fighter
IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E008 denial of service
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.3%
A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been classified as problematic. This affects the function 0x8018E008 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-224025 was assigned to this vulnerability.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
IObit · Malware FighterRelated CVEs — IObit Malware Fighter
In the same product, most dangerous first.
CVE-2023-1646MEDIUMIObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflowEPSS 0.4%CVE-2023-1643MEDIUMIObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of serviceEPSS 0.3%CVE-2023-1641MEDIUMIObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of serviceEPSS 0.3%CVE-2023-1640MEDIUMIObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of serviceEPSS 0.3%CVE-2023-1639MEDIUMIObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of serviceEPSS 0.3%CVE-2023-1638MEDIUMIObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of serviceEPSS 0.3%