CVE-2022-37771

CVE-2022-37771 affects IObit Malware Fighter v9.2 on Windows, where lack of tamper protection lets an authenticated Administrator modify application processes and escalate to SYSTEM via a crafted executable. The issue is described as a local vulnerability with high impact on confidentiality, inte...

CVE-2023-1645

CVE-2023-1645 affects IObit Malware Fighter 9.4.0.776. The vulnerability is in the IOCTL Handler’s IMFCameraProtect.sys, function 0x8018E008, where improper cleanup/release of resources can cause a denial of service. Exploitation is local (requires local access). Some sources indicate the vulnera...

CVE-2023-1639

The CVE-2023-1639 issue affects IObit Malware Fighter 9.4.0.776, specifically the ImfRegistryFilter.sys IOCTL Handler function 0x8001E04C. The vulnerability results in denial of service when exploited locally. Multiple connected sources confirm the affected component and local attack vector, with...

CVE-2023-1644

The CVE-2023-1644 entry affects IObit Malware Fighter 9.4.0.776. Affected component: IMFCameraProtect.sys, function 0x8018E010 in the IOCTL Handler. Root cause: manipulation of this function leads to a denial of service, with the attack executable on the local host. Exploit has been publicly disc...

CVE-2023-1642

The CVE-2023-1642 entry concerns IObit Malware Fighter 9.4.0.776. Affected is the IOCTL Handler’s ObCallbackProcess.sys library, specifically functions 0x222034/0x222038/0x22203C/0x222040. The manipulation leads to a Denial of Service and requires local access to exploit. Exploit details have bee...

CVE-2023-1638

CVE-2023-1638 affects IObit Malware Fighter 9.4.0.776. The vulnerability is in the IOCTL Handler, specifically the ImfRegistryFilter.sys functions 0x8001E024/0x8001E040. Local exploitation leads to denial of service. The exploit has been disclosed publicly. Attacker locality is required, and the ...

CVE-2023-1646

CVE-2023-1646 affects IObit Malware Fighter 9.4.0.776. The issue resides in the IOCTL Handler’s IMFCameraProtect.sys, manipulation of functions 0x8018E000/0x8018E004 causes a stack-based buffer overflow. Local exploitation is required; the exploit has been publicly disclosed. PT-2023-2360 notes a...

CVE-2019-6494

CVE-2019-6494 concerns IMFForceDelete.sys in IObit Malware Fighter 6.2. A low-privileged user can send IOCTL 0x8016E000 with a user-supplied string to a file, causing that file to be deleted regardless of access controls. The connected Red Hat and NVD entries corroborate the same description acro...

CVE-2023-1643

CVE-2023-1643 affects IObit Malware Fighter 9.4.0.776. The vulnerability lies in the IOCTL Handler’s ImfHpRegFilter.sys library, specifically functions 0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040, enabling denial of service via a local attack. Public exploit information is i...

CVE-2018-19086

CVE-2018-19086 affects IOBit Malware Fighter 6.2: RegFilter.sys exposed to a stack-based buffer overflow when processing IOCTL 0x8006E040 with a size greater than 8 bytes. The vulnerability allows local attacker-initiated exploitation that can cause denial of service or execute code with root pri...

CVE-2020-23864

CVE-2020-23864 affects IOBit Malware Fighter 8.0.2.547. The issue is a local privilege escalation: an attacker can drop a malicious DLL into the WindowsApps folder to gain higher privileges. The connected documents corroborate the same description across multiple sources (NVD, Red Hat, PRION, CVE...

CVE-2020-24089

CVE-2020-24089 affects IOBit Malware Fighter 8.0.2. The issue is in the kernel driver ImfHpRegFilter.sys and allows local attackers to induce a denial of service. Public sources consistently describe this DoS condition without detailing remote code execution or broader impact. The Red Hat, NVD, C...

CVE-2023-1640

Affected product: IObit Malware Fighter 9.4.0.776. Vulnerable component: ObCallbackProcess.sys, IOCTL Handler, function 0x222010. Root cause: improper cleanup/release of resources in the 0x222010 path. Impact: local attacker can cause denial of service. Exploit context: vulnerability has been dis...

CVE-2018-18714

CVE-2018-18714 affects RegFilter.sys in IOBit Malware Fighter up to version 6.2. It describes a stack-based buffer overflow triggered by IOCTL 0x8006E010, leading to DoS or code execution with root privileges. The connected documents provide these concrete details; remediation or fixed versions a...

CVE-2018-18026

CVE-2018-18026 affects IObit Malware Fighter 6.2 and possibly earlier builds via IMFCameraProtect.sys. The vulnerability is a stack-based buffer overflow exploitable through a DeviceIoControl call that supplies a user-controlled size, which can overwrite the stack return address. Reported impact ...

CVE-2018-19085

The CVE-2018-19085 entry concerns RegFilter.sys in IOBit Malware Fighter 6.2. A stack-based buffer overflow can be triggered by IOCTL 0x8006E048 with a size greater than 8 bytes, allowing local exploitation that may cause denial of service or code execution with root privileges. Supported connect...

CVE-2023-1641

CVE-2023-1641 affects IObit Malware Fighter 9.4.0.776. The issue resides in ObCallbackProcess.sys (IOCTL Handler) function 0x222018 and leads to denial of service. Exploitation is local, and the exploit has been disclosed. Connected sources indicate remediation guidance to mitigate by disabling 0...

CVE-2018-19084

Summary: CVE-2018-19084 affects IOBit Malware Fighter 6.2, specifically RegFilter.sys. The vulnerability is a stack-based buffer overflow triggered by IOCTL 0x8006E05C with an input larger than 8 bytes, which the linked documents describe as potentially causing denial of service or code execution...

CVE-2018-19087

The vulnerability affects IOBit Malware Fighter 6.2, specifically RegFilter.sys. A stack-based buffer overflow is exposed when an attacker issues IOCTL 0x8006E044 with a size greater than 8 bytes, potentially leading to denial of service or code execution with root privileges. Connected CNVD/NVD ...

CVE-2024-0430

CVE-2024-0430 affects IObit Malware Fighter v11.0.0.1274. The issue is a Denial of Service vulnerability triggered by the IOCTL code 0x8001E00C in the ImfHpRegFilter.sys driver, resulting in an availability impact. The CVE is reported with a local attack vector and requires no user interaction, w...

CVE-2020-15401

CVE-2020-15401 affects IOBit Malware Fighter Pro 8.0.2.547. A local attacker can gain privileges to delete files by manipulating malicious flagged file locations using an NTFS junction and an Object Manager symbolic link. The issue is described across multiple sources (CVE records and CNVD/PRION ...

CVE-2016-20059

CVE-2016-20059 : IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services. This allows local attackers to escalate privileges by placing a malicious executable in the unquoted path, triggering privilege escalation on service restart ...