CVE-2023-1646: IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflow

Published Mar 26, 2023

Updated

A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224026 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

IObit Malware Fighter=9.4.0.776

Event History

Mar 26, 2023

CVE Published

10:31 PM

Data Sourced

10:31 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-1646?

The severity of CVE-2023-1646 is high.

What software is affected by CVE-2023-1646?

IOBit Malware Fighter version 9.4.0.776 is affected by CVE-2023-1646.

What is the component affected by CVE-2023-1646?

The IOCTL Handler component is affected by CVE-2023-1646.

What is the CWE number for CVE-2023-1646?

The CWE number for CVE-2023-1646 is 119, 121, and 787.

Are there any references available for CVE-2023-1646?

Yes, you can refer to the following links for more information: - [VulDB](https://vuldb.com/?id.224026) - [GitHub](https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1646)