CVE-2025-0221
IOBit Protected Folder IOCTL pffilter.sys 0x22200c null pointer dereference
- State
- Published
- Severity
- 6.8 Medium
- Published
- Jan 5, 2025
- Updated
- Jan 6, 2025
- Reserved
- Jan 4, 2025
Description
A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the library pffilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | VulDB |
| 3.0 | 5.5 Medium | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | VulDB |
| 2.0 | 4.6 Medium | AV:L/AC:L/Au:S/C:N/I:N/A:C | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Protected FolderIOBit |
|
References
- VDB-290200 | IOBit Protected Folder IOCTL pffilter.sys 0x22200c null pointer dereferencevdb-entrytechnical-description
- VDB-290200 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #466955 | IOBit Protected Folder V1.3.0 NULL Pointer Dereferencethird-party-advisory
- https://shareforall.notion.site/IOBit-Protected-Folder-pffilter-0x22200C-NPD-DOS-15260437bb1e80b2a477d42396d5d06cexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.