Описание
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash.
EPSS
Процентиль: 1%
0.00095
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-822
Связанные уязвимости
CVSS3: 5.5
github
6 дней назад
ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash.
EPSS
Процентиль: 1%
0.00095
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-822