CVE-2018-18026

CVE-2018-18026 describes a stack-based buffer overflow vulnerability in the IMFCameraProtect.sys driver of IObit Malware Fighter 6.2 and potentially earlier versions. An attacker with local access can exploit this by manipulating DeviceIoControl to overwrite return addresses, leading to denial of service or arbitrary code execution. Rated 7.8 High on CVSS, this vulnerability has a low attack complexity but allows for high impact to confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.