CVE-2022-2402: Stack Overflow in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-09-06 · updated 2026-06-17
Weakness: CWE-121

Description

The vulnerability in the driver dlpfde.sys enables a user logged into the system to perform system calls leading to kernel stack overflow, resulting in a system crash, for instance, a BSOD.

Affected products

ESET Endpoint Encryption: before 5.1.2.26 — fixed in 5.1.2.26
ESET Full Disk Encryption: before 1.3.2.32 — fixed in 1.3.2.32

How to fix

Upgrade to a fixed version: ESET Endpoint Encryption 5.1.2.26; ESET Full Disk Encryption 1.3.2.32. Check the vendor advisory for mitigations.

References

https://support.eset.com/en/ca8298-vulnerability-fixed-in-eset-endpoint-encryption-and-eset-full-disk-encryption-for-windows
https://support.eset.com/en/ca8298-vulnerability-fixed-in-eset-endpoint-encryption-and-eset-full-disk-encryption-for-windows

Get alerted when CVE-2022-2402 or the next vulnerability affects your stack