WinPmem vulnerabilities

2 known vulnerabilities in WinPmem from Velocidex. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  WinPmem: Out-of-bounds Write

  CVE-2024-12668Dec 16, 2024Velocidex

  Velocidex WinPmem versions below 4.1 suffer from an Out of Bounds Write vulnerability. By using an IO Control, a user space program can trick the driver into writing a 0 into any chosen memory location. In conjunction with information leakage from the WinPmem

• 7.3 High severity

  WinPmem: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2024-10972Dec 16, 2024Velocidex

  Velocidex WinPmem versions 4.1 and below suffer from an Improper Input Validation vulnerability whereby an attacker with admin access can trigger a BSOD with a parallel thread changing the memory’s access right under the control of the user-mode application. T