Cyber Resilience

CVE-2023-1643

Iobit Malware Fighter 9.4.0.776

Public PoC
Published
26 March 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0033 25th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2023-1643 is a medium-severity Improper Resource Shutdown or Release (CWE-404) vulnerability in Iobit Malware Fighter. Its CVSS base score is 5.5 (Medium).

Operationally, ranked at the 25th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

A vulnerability has been found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this vulnerability is the function 0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040 in the library ImfHpRegFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. Attacking locally…

more

is a requirement. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224023.

CWE(s)
CWE-404

Related Threats

CVEs Like This One

CVE-2023-1642Same product: Iobit Malware Fighter
CVE-2023-1638Same product: Iobit Malware Fighter
CVE-2023-1639Same product: Iobit Malware Fighter
CVE-2023-1644Same product: Iobit Malware Fighter
CVE-2023-1645Same product: Iobit Malware Fighter
CVE-2023-1641Same product: Iobit Malware Fighter
CVE-2023-1640Same product: Iobit Malware Fighter
CVE-2023-1646Same product: Iobit Malware Fighter
CVE-2016-20059Same product: Iobit Malware Fighter
CVE-2024-0430Same product: Iobit Malware Fighter

Affected Assets

iobit
malware fighter
9.4.0.776

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

CP-5 Contingency Plan Update
addresses: CWE-404

Contingency plan updates incorporate proper resource shutdown and release steps, preventing attackers from leveraging incomplete cleanup during recovery scenarios.

SC-10 Network Disconnect
addresses: CWE-404

Mandates explicit shutdown of the network connection at session conclusion, directly addressing improper resource release.

SC-4 Information in Shared System Resources
addresses: CWE-404

Requires proper shutdown/release procedures that include overwriting or isolating data to block unintended transfer via reused system objects.

SI-17 Fail-safe Procedures
addresses: CWE-404

Procedures can mandate orderly shutdown or release of resources when failures occur, preventing improper resource handling after a fault.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly include coding standards for correct resource allocation and release.

DE.CM-09 partial match
prevents

Runtime monitoring can detect resource exhaustion caused by improper shutdown or release.

ID.AM-08 partial match
prevents

Lifecycle management of assets can encompass proper resource release at end-of-life or shutdown.

PR.IR-04 partial match
prevents

Capacity management helps surface leaks from unreleased resources but does not prevent the coding flaw.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.5.37 Documented operating procedures partial match
prevents

Including restart, recovery and media-handling instructions reduces the likelihood that resources or sensitive data will be left in an exposed or improperly released state after a failure.

References