CVE-2019-9729

CVE-2019-9729 is a privilege escalation vulnerability in the SdoKeyCrypt.sys driver of Shanda MapleStory Online V160. It stems from an integer signedness error and heap-based buffer underflow due to inadequate input validation for IOCtl 0x8000c01c, allowing a local attacker to gain NT AUTHORITY\SYSTEM privileges. With a CVSS score of 7.8 (HIGH), this vulnerability is easily exploitable locally with low attack complexity, leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.