CVE-2024-10972 | Velocidex WinPmem up to 4.0 IRP_MJ_DEVICE_CONTROL input validation

A vulnerability was found in Velocidex WinPmem up to 4.0. It has been rated as problematic. Affected by this issue is the function IRP_MJ_DEVICE_CONTROL. The manipulation leads to improper input validation.

This vulnerability is handled as CVE-2024-10972. It is possible to launch the attack on the local host. There is no exploit available.

It is recommended to upgrade the affected component.