CVE-2022-25949

Name of the Vulnerable Software and Affected Versions KINGSOFT Internet Security 9 Plus version 2010.06.23.247

Description The issue is related to the kernel mode driver kwatch3, which fails to properly handle crafted inputs. This failure leads to a stack-based buffer overflow. The exploitation of this issue may allow an attacker to execute arbitrary code.

Recommendations For KINGSOFT Internet Security 9 Plus version 2010.06.23.247, consider disabling the kwatch3 driver as a temporary workaround until a patch is available. Restrict access to the kwatch3 driver to minimize the risk of exploitation.