CVE-2021-21792 Information disclosure in IObit

What is CVE-2021-21792?

CVE-2021-21792 is a medium-severity vulnerability in IObit, published on 5 Aug 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet (IRP) can lead to privileged reads in the context of a driver which can result in sensitive information disclosure from the kernel. The IN instruction can read four bytes from the given I/O device, potentially leaking sensitive device data to unprivileged users.

Weakness: CWE-782

Which versions are affected by CVE-2021-21792?

It affects 1 product.

Products include Iobit Advanced Systemcare Ultimate.

How do I fix CVE-2021-21792?

No fix has been published for CVE-2021-21792 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-21792 being exploited?

There is no known exploitation of CVE-2021-21792 in the wild and no public exploit code.

Other vulnerabilities in IObit

• CVE-2021-21786 Privilege escalation in Iobit High 8.8
• CVE-2021-21787 Privilege escalation in Iobit High 8.8
• CVE-2021-21788 Privilege escalation in Iobit High 8.8
• CVE-2021-21789 Privilege escalation in Iobit High 8.8
• CVE-2018-9040 Denial of service in n/a High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7m28-prvw-2j2x.