CVEvulnerability
CVE-2023-1048
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-02-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:L/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-665
Description
A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5. This issue affects some unknown processing in the library WinRing0x64.sys. The manipulation leads to improper initialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221807.
Affected configurations
• techpowerup dram calculator for ryzen 1.7.3
Related
Weakness · CWE (1)
- CWE-665 Improper Initialization weakness
References
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1048 Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.221807 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.221807 Permissions Required, Third Party Advisory
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1048 Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.221807 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.221807 Permissions Required, Third Party Advisory