Vulnerability Description
An issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
CVSS Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Related Weaknesses (CWE)
References
- https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33223
- https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33223
FAQ
What is CVE-2024-33223?
CVE-2024-33223 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
How severe is CVE-2024-33223?
CVE-2024-33223 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-33223?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.