VULNERABILITY INTELLIGENCE

CVE-2024-12657

CVSS score5.5 MEDIUM

EPSS probability0.38%

CISA KEVNot currently listed

Published2024-12-16

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

A vulnerability has been found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This vulnerability affects the function 0x8001E000 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness classification

cna@vuldb.com: CWE-404
nvd@nist.gov: CWE-476

Primary references

cna@vuldb.com — Exploit, Third Party Advisory
cna@vuldb.com — Permissions Required, VDB Entry
cna@vuldb.com — Permissions Required, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry