CVE-2019-8372 Privilege escalation in n/a
Low-privileged users can read and write arbitrary physical memory via the LHA.sys driver to elevate system privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-8372?
CVE-2019-8372 is a high-severity vulnerability in n/a, published on 18 Feb 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link and an open DACL.
Weakness: CWE-59
Which versions are affected by CVE-2019-8372?
It affects 1 product.
Products include Lg Lha.sys.
How do I fix CVE-2019-8372?
No fix has been published for CVE-2019-8372 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-8372 being exploited?
There is no known exploitation of CVE-2019-8372 in the wild and no public exploit code.
Sources
Also known as GHSA-428q-4w9h-gx2c.