CVE-2021-44968

HIGH

IOBit Advanced SystemCare 15 Pro - Use-After-Free via Sequential IOCTL Requests

Title source: llm

Description

A Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in sequential order using the IOCTL driver codes, which could let a malicious user execute arbitrary code or a Denial of Service (system crash). IOCTL list: iobit_ioctl = [0x8001e01c, 0x8001e020, 0x8001e024, 0x8001e040,0x8001e044, 0x8001e048, 0x8001e04c, 0x8001e000, 0x8001e004, 0x8001e008, 0x8001e00c, 0x8001e010, 0x8001e014, 0x8001e018]

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://github.com/Quadron-Research-Lab/Kernel_Driver_bugs/tree/main/iobit_advenced_system_care

Scores

CVSS v3 7.8

EPSS 0.0040

EPSS Percentile 32.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-416

Status published

Products (1)

iobit/advanced_systemcare 15

Published Feb 18, 2022

Tracked Since Feb 18, 2026