Vulnerability · Published Jan 5, 2025 · Assigned by VulDB
CVE-2025-0221IOBit Protected Folder IOCTL pffilter.sys 0x22200c null pointer dereference
Medium 5.5
In plain English
A medium-severity null pointer dereference in Protected Folder from IOBit. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Official description
A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the library pffilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IOBit | Protected Folder | 1.01.11.21.3 |
Weakness: CWE-476, CWE-404 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- VDB-290200 | IOBit Protected Folder IOCTL pffilter.sys 0x22200c null pointer dereference vdb-entry, technical-description
- VDB-290200 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #466955 | IOBit Protected Folder V1.3.0 NULL Pointer Dereference third-party-advisory
- https://shareforall.notion.site/IOBit-Protected-Folder-pffilter-0x22200C-NPD-DOS-15260437bb1e80b2a477d42396d5d06c exploit