CVE-2019-1347

MEDIUM

Windows 10, 8.1, RT 8.1, Server 2012, 2016, 2019 - Denial of Service via Memory Object Handling

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-1347. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit demonstrates a Windows kernel crash (DoS) via a malformed PE image loaded with LoadLibraryEx(LOAD_LIBRARY_AS_DATAFILE | LOAD_LIBRARY_AS_IMAGE_RESOURCE). The crash occurs due to an invalid Base Relocation Table directory address in the PE headers, triggering a PAGE_FAULT_IN_NONPAGED_AREA (0x50) in nt!MiRelocateImage.

Description

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1346.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · textdoswindows

https://www.exploit-db.com/exploits/47489

View Code ZIP pw:eip

This exploit demonstrates a Windows kernel crash (DoS) via a malformed PE image loaded with LoadLibraryEx(LOAD_LIBRARY_AS_DATAFILE | LOAD_LIBRARY_AS_IMAGE_RESOURCE). The crash occurs due to an invalid Base Relocation Table directory address in the PE headers, triggering a PAGE_FAULT_IN_NONPAGED_AREA (0x50) in nt!MiRelocateImage.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: Windows 8.1, Windows 10, and corresponding Server editions (32-bit and 64-bit)

No auth needed

Prerequisites: Ability to place a malformed PE file on the target system · User interaction (e.g., file hover, properties access)

MITRE ATT&CK

T1499 - Endpoint Denial of Service

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_misc

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1347

Third Party Advisory, VDB Entry x_refsource_misc

http://packetstormsecurity.com/files/154802/Microsoft-Windows-Kernel-nt-MiRelocateImage-Out-Of-Bounds-Read.html

Scores

CVSS v3 6.5

EPSS 0.1399

EPSS Percentile 96.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-125

Status published

Products (14)

microsoft/windows_10

microsoft/windows_10 1607

microsoft/windows_10 1703

microsoft/windows_10 1709

microsoft/windows_10 1803

microsoft/windows_10 1809

microsoft/windows_10 1903

microsoft/windows_8.1

microsoft/windows_rt_8.1

microsoft/windows_server_2012 r2

... and 4 more

Published Oct 10, 2019

Tracked Since Feb 18, 2026