CVE-2019-6492

Published: Mar 21, 2019Modified: Jun 17, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can be leaked if the kernel pool becomes a "big" pool.

Affected (1)

Products: Iobit: Smart Defrag

Iobit

1 product

Smart Defrag

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Iobit Smart Defrag	Version 6.0

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (2)

https://downwithup.github.io/CVEPosts.html

Source: cve@mitre.org

ExploitThird Party Advisory

https://downwithup.github.io/CVEPosts.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.