IObit Protected Folder up to 13.6.0.5 IOCTL IUProcessFilter.sys 0x8001E000/0x8001E004 null pointer dereference

Summaryinfo

A vulnerability identified as problematic has been detected in IObit Protected Folder up to 13.6.0.5. Affected is the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2025-0222. The attack needs to be performed locally. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

Detailsinfo

A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys of the component IOCTL Handler. The manipulation with an unknown input leads to a null pointer dereference vulnerability. Using CWE to declare the problem leads to CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. Impacted is availability.

The advisory is shared at shareforall.notion.site. The identification of this vulnerability is CVE-2025-0222. The exploitation is known to be easy. An attack has to be approached locally. Technical details as well as a public exploit are known.

The exploit is available at shareforall.notion.site. It is declared as proof-of-concept. The vendor was contacted early about this disclosure but did not respond in any way.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• IObit

Name

• Protected Folder

Version

• 13.6.0.0
• 13.6.0.1
• 13.6.0.2
• 13.6.0.3
• 13.6.0.4
• 13.6.0.5

License

• free

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #466956: IOBit Uninstaller 13.6.0.5 NULL Pointer Dereference (by TopGun)

Duplicate

• Submit #XXXXXX: Xxxxx Xxxxxxxxxxx Xx.x.x.x Xxxx Xxxxxxx Xxxxxxxxxxx (by TopGun)

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion