CVE-2018-3970

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-10-25 · updated 2026-06-17
Weakness: CWE-908

Description

An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.

Affected products

Sophos HitmanPro.Alert: 3.7.6.744

References

http://www.securityfocus.com/bid/105743
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0635
http://www.securityfocus.com/bid/105743
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0635

Get alerted when CVE-2018-3970 or the next vulnerability affects your stack