POC-CVE-2024-12227

CVE-2024-12227 - NTIOLibX64.sys DoS PoC Proof of Concept per CVE-2024-12227 - Vulnerabilità di dereferenziazione di puntatore nullo nel driver NTIOLibX64.sys di MSI Dragon Center. Descrizione NTIOLibX64.sys versione 3.0.0.10 contiene una vulnerabilità di dereferenziazione di puntatore nullo nella...

CVE-2021-44900

Micro-Star International MSI App Player = 4.280.1.6309 is vulnerable to multiple Privilege Escalation LPE/EoP vulnerabilities in the NTIOLibX64.sys and BstkDrvmsi2.sys drivers components. All the vulnerabilities are triggered by sending specific IOCTL requests...

CVE-2024-12227

A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLibX64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on t...

CVE-2024-12227 MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference

A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLibX64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on t...

CVE-2024-12227 MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference

A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLibX64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on t...

CVE-2024-12227

MSI Dragon Center up to version 2.0.146.0 is affected by a local, null-pointer dereference in the IOCTL Handler via NTIOLib_X64.sys (MmUnMapIoSpace). The issue arises in the ReadPhysicalMemory/Ioctl 0xC3506104 path when MmMapIoSpace may return NULL and the code uses the pointer without validation...

Privilege escalation

Micro-Star International MSI App Player = 4.280.1.6309 is vulnerable to multiple Privilege Escalation LPE/EoP vulnerabilities in the NTIOLibX64.sys and BstkDrvmsi2.sys drivers components. All the vulnerabilities are triggered by sending specific IOCTL requests...

CVE-2021-44903

CVE-2021-44903 affects Micro-Star International (MSI) Center Pro <= 2.0.16.0. The vulnerability set comprises multiple Privilege Escalation (LPE/EoP) flaws in driver components: atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib_X64.sys, WinRing0.sys, and WinRing0x64.sys. All flaws a...

CVE-2021-44901

MSI Dragon Center

CVE-2021-44900

Micro-Star International MSI App Player = 4.280.1.6309 is vulnerable to multiple Privilege Escalation LPE/EoP vulnerabilities in the NTIOLibX64.sys and BstkDrvmsi2.sys drivers components. All the vulnerabilities are triggered by sending specific IOCTL requests...

CVE-2021-44899

CVE-2021-44899 concerns Micro-Star International (MSI) Center <= 1.0.31.0. The connected documents describe multiple privilege escalation vulnerabilities in MSI Center’s driver components (atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib_X64.sys, WinRing0.sys, WinRing0x64.sys). All...