CVE-2023-1646 IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflow
A local attacker can exploit a stack-based buffer overflow in the IMFCameraProtect.sys driver to execute arbitrary code with elevated privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-1646?
CVE-2023-1646 is a medium-severity memory corruption vulnerability in IObit Malware Fighter, published on 26 Mar 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224026 is the identifier assigned to this vulnerability.
Which versions are affected by CVE-2023-1646?
It affects 1 product.
Products include Iobit Malware Fighter.
How do I fix CVE-2023-1646?
No fix has been published for CVE-2023-1646 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-1646 being exploited?
There is no known exploitation of CVE-2023-1646 in the wild and no public exploit code.
Other vulnerabilities in IObit Malware Fighter
Sources
Also known as GHSA-9rc9-gp35-8v5g.