CVE-2020-10234 Null dereference in n/a

What is CVE-2020-10234?

CVE-2020-10234 is a medium-severity vulnerability in n/a, published on 5 Feb 2021. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send an IOCTL to the device driver. If the user provides a NULL entry for the dwIoControlCode parameter, a kernel panic (aka BSOD) follows. The IOCTL codes can be found in the dispatch function: 0x8001E000, 0x8001E004, 0x8001E008, 0x8001E00C, 0x8001E010, 0x8001E014, 0x8001E020, 0x8001E024, 0x8001E040, 0x8001E044, and 0x8001E048. \DosDevices\AscRegistryFilter and \Device\AscRegistryFilter are affected.

Which versions are affected by CVE-2020-10234?

It affects 1 product.

Products include Iobit Advanced Systemcare.

How do I fix CVE-2020-10234?

No fix has been published for CVE-2020-10234 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-10234 being exploited?

There is no known exploitation of CVE-2020-10234 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2018-16711 Privilege escalation in n/a High 8.8
• CVE-2022-24138 Privilege escalation in n/a High 7.8
• CVE-2021-44968 Use after free in n/a High 7.8
• CVE-2020-14990 Path traversal in n/a High 7.1
• CVE-2018-16712 Information disclosure in n/a Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pr3w-2ff8-48mm.