CVE-2024-12658

Summary

CVE-2024-12658 is a newly disclosed vulnerability that affects IObit Advanced SystemCare Ultimate versions up to 17.0.0. The issue lies within the AscRegistryFilter.sys component's IOCTL Handler library and the function 0x8001E01C. This vulnerability results in a null pointer dereference, which can be exploited with local access. Unfortunately, the exploit for this vulnerability has been made public, increasing the risk for potential attacks. Despite early disclosure to the vendor, they have not yet responded with a patch or mitigation strategy.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.