VULNERABILITY INTELLIGENCE

CVE-2024-10972

CVSS score7.3 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2024-12-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H

Description

Velocidex WinPmem versions 4.1 and below suffer from an Improper Input Validation vulnerability whereby an attacker with admin access can trigger a BSOD with a parallel thread changing the memory’s access right under the control of the user-mode application. This is due to verification only being performed at the beginning of the routine allowing the userspace to change page permissions half way through the routine.  A valid workaround is a rule to detect unauthorized loading of winpmem outside incident response operations.

Weakness classification

  • cve@rapid7.com: CWE-367

Primary references