CVE-2024-48605

Deeper analysis

CVE-2024-48605 is a DLL hijacking vulnerability in the Helakuru Desktop Application version 1.1. It stems from insufficient validation of the wow64log.dll file, classified under CWE-427 as an uncontrolled search path element. The flaw received a CVSS 3.1 score of 7.8, reflecting local attack vector, low complexity, and low privileges required for exploitation.

A local attacker can place a malicious wow64log.dll in a location searched by the application at runtime, causing it to load and execute arbitrary code. Successful exploitation grants the attacker full control over the affected process, enabling impacts to confidentiality, integrity, and availability on the host system.

The provided references point to similar DLL hijacking techniques observed in other applications but contain no vendor advisories, patches, or mitigation guidance specific to Helakuru. The EPSS score remains low, with a current value of 0.0584 and a peak of 0.0746, indicating limited observed exploitation interest to date.