CVE-2024-12658: IObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E01C null pointer dereference
A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This issue affects the function 0x8001E01C in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12658?
CVE-2024-12658 is classified as problematic due to its potential to cause null pointer dereference.
How do I fix CVE-2024-12658?
To fix CVE-2024-12658, update IObit Advanced SystemCare Ultimate to version 17.0.1 or later.
What component is affected by CVE-2024-12658?
CVE-2024-12658 affects the AscRegistryFilter.sys library within the IOCTL Handler component.
Who is affected by CVE-2024-12658?
Users of IObit Advanced SystemCare Ultimate up to version 17.0.0 are affected by CVE-2024-12658.
What type of vulnerability is CVE-2024-12658?
CVE-2024-12658 is a local access vulnerability that leads to null pointer dereference.