CVE-2024-36424

This PoC demonstrates a null pointer dereference vulnerability in K7 Ultimate Security's K7RKScan.sys driver (version < 17.0.2019) via IOCTL 0x222010, leading to a BSOD. The exploit opens a handle to the driver and sends a crafted DeviceIoControl request with a null input buffer.

The repository contains a functional proof-of-concept exploit for CVE-2024-36424, a null pointer dereference vulnerability in K7 Ultimate Security's K7RKScan.sys driver. The PoC triggers a BSOD by sending a crafted IOCTL request with a null input buffer to the vulnerable driver.