VULNERABILITY INTELLIGENCE

CVE-2018-15735

CVSS score5.5 MEDIUM
EPSS probability0.45%
CISA KEVNot currently listed
Published2019-06-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000206F.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references