CVE-2019-8372

CVE-2019-8372 describes a privilege escalation vulnerability in the LHA.sys driver of LG Device Manager, affecting versions before 1.1.1811.2101. This flaw allows low-privileged users to read and write arbitrary physical memory by sending specially crafted IOCTL requests, due to an open DACL on the device object's symbolic link. Rated 7.0 HIGH, the attack requires local access but has high impact on confidentiality, integrity, and availability, with high attack complexity. There is no evidence of active exploitation, nor are there public exploit modules in Metasploit or ExploitDB, though it has garnered some community discussion and media coverage.