CVE-2024-12227
MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference
- State
- Published
- Severity
- 6.8 Medium
- Published
- Dec 5, 2024
- Updated
- Dec 5, 2024
- Reserved
- Dec 5, 2024
Description
A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLib_X64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. Upgrading to version 2.0.148.0 is able to address this issue. It is recommended to upgrade the affected component.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | VulDB |
| 3.0 | 5.5 Medium | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | VulDB |
| 2.0 | 4.6 Medium | AV:L/AC:L/Au:S/C:N/I:N/A:C | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Dragon CenterMSI |
|
References
- VDB-286959 | MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereferencevdb-entrytechnical-description
- VDB-286959 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #456017 | MSI MSI Dragon Center 2.0.146.0 NULL Pointer Dereferencethird-party-advisory
- https://shareforall.notion.site/MSI-Dragon-Center-NTIOLib_X64-0xC3506104-MmMapIoSpace-DOS-15160437bb1e801daf58d4aea052970erelated
- https://www.msi.com/Landing/dragon-center-download/nbbroken-linkpatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.