CVE-2024-23439

HIGH

Vba32 Antivirus 3.36.0 - Arbitrary Memory Read via Vba32m64.sys Driver IOCTL Codes

Title source: llm

Description

Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0x22203F, 0x222057 and 0x22205B IOCTL codes of the Vba32m64.sys driver.

References (2)

Core 2

Core References

Third Party Advisory third-party-advisory

https://fluidattacks.com/advisories/adderley/

Product product

https://www.anti-virus.by/vba32

Scores

CVSS v3 7.1

EPSS 0.0021

EPSS Percentile 11.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-125

Status published

Products (1)

anti-virus/vba32 3.36.0

Published Feb 13, 2024

Tracked Since Feb 18, 2026