{"id":"CVE-2024-12227","state":"PUBLISHED","title":"MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference","description":"A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLib_X64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. Upgrading to version 2.0.148.0 is able to address this issue. It is recommended to upgrade the affected component.","publishedAt":"2024-12-05T13:31:05.008Z","updatedAt":"2024-12-05T15:39:52.179Z","severity":{"score":6.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","source":"VulDB"},"assigner":"VulDB","products":["MSI Dragon Center"],"affected":[{"vendor":"MSI","product":"Dragon Center","versions":[{"version":"2.0.146","status":"affected"}],"modules":["IOCTL Handler"]}],"references":["https://vuldb.com/?id.286959","https://vuldb.com/?ctiid.286959","https://vuldb.com/?submit.456017","https://shareforall.notion.site/MSI-Dragon-Center-NTIOLib_X64-0xC3506104-MmMapIoSpace-DOS-15160437bb1e801daf58d4aea052970e","https://www.msi.com/Landing/dragon-center-download/nb"],"weaknesses":["CWE-476","CWE-404"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/12xxx/CVE-2024-12227.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-12227","state":"PUBLISHED","datePublished":"2024-12-05T13:31:05.008Z","dateUpdated":"2024-12-05T15:39:52.179Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2024-12-05T06:52:51.937Z"},"containers":{"cna":{"title":"MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference","descriptions":[{"lang":"en","value":"A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLib_X64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. Upgrading to version 2.0.148.0 is able to address this issue. It is recommended to upgrade the affected component."},{"lang":"de","value":"Es wurde eine problematische Schwachstelle in MSI Dragon Center bis 2.0.146.0 gefunden. Betroffen hiervon ist die Funktion MmUnMapIoSpace in der Bibliothek NTIOLib_X64.sys der Komponente IOCTL Handler. Mit der Manipulation mit unbekannten Daten kann eine null pointer dereference-Schwachstelle ausgenutzt werden. Der Angriff muss lokal erfolgen. Ein Aktualisieren auf die Version 2.0.148.0 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen."}],"affected":[{"vendor":"MSI","product":"Dragon Center","versions":[{"version":"2.0.146","status":"affected"}],"modules":["IOCTL Handler"]}],"references":[{"url":"https://vuldb.com/?id.286959","name":"VDB-286959 | MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.286959","name":"VDB-286959 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.456017","name":"Submit #456017 | MSI MSI Dragon Center 2.0.146.0 NULL Pointer Dereference","tags":["third-party-advisory"]},{"url":"https://shareforall.notion.site/MSI-Dragon-Center-NTIOLib_X64-0xC3506104-MmMapIoSpace-DOS-15160437bb1e801daf58d4aea052970e","tags":["related"]},{"url":"https://www.msi.com/Landing/dragon-center-download/nb","tags":["broken-link","patch"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.8,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.5,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.5,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4.6,"vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","type":"CWE","lang":"en","description":"NULL Pointer Dereference"}]},{"descriptions":[{"cweId":"CWE-404","type":"CWE","lang":"en","description":"Denial of Service"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2024-12-05T13:31:05.008Z"},"timeline":[{"time":"2024-10-07T00:00:00.000Z","lang":"en","value":"Countermeasure disclosed"},{"time":"2024-12-05T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-12-05T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2024-12-05T07:58:09.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"TopGun (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"msi","product":"dragon_center","defaultStatus":"unknown","versions":[{"version":"2.0.146","status":"affected"}],"cpes":["cpe:2.3:a:msi:dragon_center:2.0.146:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-12-05T15:36:00.718970Z","id":"CVE-2024-12227","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-12-05T15:39:52.179Z"}}]}}}