CVE-2025-0223: IObit Protected Folder IOCTL IURegistryFilter.sys 0x8001E010 null pointer dereference
A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0223?
CVE-2025-0223 has been classified as problematic, indicating a significant vulnerability in the software.
How do I fix CVE-2025-0223?
To fix CVE-2025-0223, update IObit Protected Folder to version 13.6.0.6 or later.
What components are affected by CVE-2025-0223?
CVE-2025-0223 affects the IURegistryFilter.sys library, specifically the IOCTL Handler functions.
What is the impact of exploiting CVE-2025-0223?
Exploiting CVE-2025-0223 can lead to the manipulation of null pointers, which may compromise the application's stability.
Which versions of IObit Protected Folder are vulnerable to CVE-2025-0223?
IObit Protected Folder versions up to 13.6.0.5 are vulnerable to CVE-2025-0223.