CVE-2021-40425
HIGH 7.1EPSS 0.3%
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. A specially-crafted executable can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability. An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. An IOCTL_B03 request with specific invalid data causes a similar issue in the device driver WRCore_x64. An attacker can issue an ioctl to trigger this vulnerability.
- CVSS v3.1
- 6.5 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - CVSS v3.0
- 7.1 HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - CVSS v2.0
- 4.9 MEDIUM
AV:L/AC:L/Au:N/C:N/I:N/A:C - EPSS
- 0.33% chance of exploitation in the next 30 days, 25th percentile
- Published
- 2022-04-14
- Updated
- 2025-04-15