CVE-2019-6493

CVE-2019-6493 affects IObit Smart Defrag 6 (SmartDefragDriver.sys, v2.0). The issue arises because the driver never frees an executable kernel pool allocated with user-defined bytes and size when IOCTL 0x9C401CC0 is invoked, allowing a leak of a kernel pointer if the pool becomes a “big” pool. Co...

CVE-2019-6492

CVE-2019-6492 affects IObit Smart Defrag 6, specifically SmartDefragDriver.sys (version 2.0). The issue: a kernel-pool allocation made with user-defined bytes/size via IOCTL 0x9C401CC4 is never freed, allowing a kernel-pointer leak if the pool grows large. This description is supported by Red Hat...