CVE-2022-24481-analysis

CVE-2022-24481 Type Confusion Type confusion Vulnerable File clfs.sys Root Cause Because the validation logic for rgContainers0 is not strict, after forging rgContainers0, ClientContext overlaps with the ContainerContext structure. If the fake data is accepted, after CloseHandle,...