CVE-2019-6492

Name of the Vulnerable Software and Affected Versions IObit Smart Defrag version 6

Description The issue concerns the SmartDefragDriver.sys driver in IObit Smart Defrag 6, which fails to free an executable kernel pool allocated with user-defined bytes and size when a specific IOCTL (0x9C401CC4) is called. This can lead to a kernel pointer leak if the kernel pool becomes a "big" pool.

Recommendations For IObit Smart Defrag version 6, consider disabling the SmartDefragDriver.sys driver until a patch is available to prevent potential exploitation.