Skip to content
OpenAdvisories
Low · 3.8 CVE-2020-13523 EUVD-2020-5770GHSA-9fhq-mmq4-6fp7

An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request …

Published Aug 4, 2020 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— SoftPerfect SoftPerfect RAM Disk 4.1 —

References