CVE-2022-25949

2022-03-1717:15:25

CWE-121

jpcert

www.cve.org

kingsoft internet security

driver

buffer overflow

stack-based

cve-2022-25949

EPSS

0.001

Percentile

25.6%

JSON

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow.

CNA Affected

[
  {
    "product": "KINGSOFT Internet Security 9 Plus",
    "vendor": "KINGSOFT JAPAN, INC.",
    "versions": [
      {
        "status": "affected",
        "version": "Reported for Version 2010.06.23.247"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN21234459/

support.kingsoft.jp/support-info/weakness.html

EPSS

0.001

Percentile

25.6%

JSON

Related for CVELIST:CVE-2022-25949