Vulnerability · Published Mar 25, 2023 · Assigned by VulDB

CVE-2023-1631JiangMin Antivirus IOCTL kvcore.sys 0x222010 null pointer dereference

Medium 5.5

In plain English

A medium-severity null pointer dereference in Antivirus from JiangMin. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 29% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.3%top 71.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224013 was assigned to this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
JiangMin	Antivirus	16.2.2022.418

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

https://vuldb.com/?id.224013 vdb-entry, technical-description
https://vuldb.com/?ctiid.224013 signature, permissions-required
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1631 related
https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view exploit