CVE-2024-12658: IObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E01C null pointer dereference
First published: Mon Dec 16 2024(Updated: )
A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This issue affects the function 0x8001E01C in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IObit Advanced SystemCare | <=17.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-12658?
CVE-2024-12658 is classified as problematic due to its potential to cause null pointer dereference.
How do I fix CVE-2024-12658?
To fix CVE-2024-12658, update IObit Advanced SystemCare Ultimate to version 17.0.1 or later.
What component is affected by CVE-2024-12658?
CVE-2024-12658 affects the AscRegistryFilter.sys library within the IOCTL Handler component.
Who is affected by CVE-2024-12658?
Users of IObit Advanced SystemCare Ultimate up to version 17.0.0 are affected by CVE-2024-12658.
What type of vulnerability is CVE-2024-12658?
CVE-2024-12658 is a local access vulnerability that leads to null pointer dereference.
- agent/weakness
- agent/references
- agent/title
- agent/type
- agent/first-publish-date
- agent/description
- agent/severity
- agent/author
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/trending
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/iobit
- canonical/iobit advanced systemcare
- version/iobit advanced systemcare/17.0.0