VULNERABILITY INTELLIGENCE

CVE-2018-3970

CVSS score5.5 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2018-10-25

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.

Weakness classification

CWE-908: Use of Uninitialized Resource

Primary references

talos-cna@cisco.com — Broken Link, Third Party Advisory, VDB Entry
talos-cna@cisco.com — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory