VULNERABILITY INTELLIGENCE

CVE-2024-23440

CVSS score7.1 HIGH
EPSS probability0.21%
CISA KEVNot currently listed
Published2024-02-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Description

Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802 of memory from ar arbitrary user-supplied pointer.

Weakness classification

  • help@fluidattacks.com: CWE-125

Primary references