CVE-2018-20331 describes a Kernel Pool Buffer Overflow vulnerability in Antiy AVL ATool v1.0.0.22, specifically within the ssdt.sys kernel driver's handling of IOCTL 0x80002004. This flaw, caused by insufficient validation of user-supplied data length, allows a local attacker with low-privileged code execution to achieve arbitrary code execution in the kernel context, leading to privilege escalation or denial of service. Rated 7.8 HIGH on CVSS, the attack requires local access but has low complexity. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), no evidence of active exploitation, and minimal community or media discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0.0.22CPE matchmatch criteria | cpe:2.3:a:antiy:anti_virus_lab_atool:1.0.0.22:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.