CVEvulnerability
CVE-2023-1628
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-03-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:S/C:N/I:N/A:C
- Weaknesses
- CWE-476
Description
A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224010 is the identifier assigned to this vulnerability.
Affected configurations
• jiangmin jiangmin antivirus 16.2.2022.418
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view Exploit, Third Party Advisory
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned30 Third Party Advisory
- https://vuldb.com/?ctiid.224010 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.224010 Third Party Advisory
- https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view Exploit, Third Party Advisory
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned30 Third Party Advisory
- https://vuldb.com/?ctiid.224010 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.224010 Third Party Advisory