Approved changes feed: RSS · Atom
cpe:2.3:a:velocidex:winpmem:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Velocidex (35fcea74-f415-56af-95a7-529328e6f7f0) |
|---|---|
| Product | Winpmem (e7ec9852-888e-5335-a1ad-2aa80213c465) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-12668 |
vulnerable | 2026-06-08 06:25:35.874500 |
Velocidex WinPmem Out of Bounds Write Vulnerability
HIGH (8.2)
Velocidex WinPmem versions below 4.1 suffer from an Out of Bounds Write vulnerability. By using an IO Control, a user space program can trick the driver into writing a 0 into any chosen memory location. In conjunction with information leakage from the WinPmem driver, attackers can discover the location in memory for the g_CiOptions global symbol. This can be leveraged to disable signed driver enforcement on the target system - allowing attackers to load unsigned drivers.
Published: 2024-12-16T14:56:17.136Z
Updated: 2024-12-16T16:14:22.987Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10972 |
vulnerable | 2026-06-08 06:23:48.317005 |
WinPmem Improper Input Validation vulnerability
HIGH (7.3)
Velocidex WinPmem versions 4.1 and below suffer from an Improper Input Validation vulnerability whereby an attacker with admin access can trigger a BSOD with a parallel thread changing the memory’s access right under the control of the user-mode application. This is due to verification only being performed at the beginning of the routine allowing the userspace to change page permissions half way through the routine. A valid workaround is a rule to detect unauthorized loading of winpmem outside incident response operations.
Published: 2024-12-16T14:49:07.294Z
Updated: 2025-09-05T08:40:18.985Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.