CVE-2024-12657

Summary

CVE-2024-12657 is a newly disclosed vulnerability affecting IObit Advanced SystemCare Ultimate versions up to 17.0.0. The issue lies in the AscRegistryFilter.sys library's IOCTL Handler component and its function 0x8001E000. The manipulation of this function results in a null pointer dereference, which can be exploited locally. The vulnerability has been made public, and an exploit is available. Despite early notification, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.