Back to Database
Status published
High
CVE-2019-8372
The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes...
Vulnerability Description
The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link and an open DACL.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-8372
Credits & Attribution
No credits recorded in the NVD database.
References
More from lg
View All →CVE-2022-23727
There is a privilege escalation vulnerability in some webOS TVs....
High
7.8
CVE-2021-38306
Network Attached Storage on LG N1T1*** 10124 devices allows an...
Critical
9.8
CVE-2020-9759
webOS TV Emulator privilege escalation vulnerability
Medium
4.6
CVE-2019-7404
An issue was discovered on LG GAMP-7100, GAPM-7200, and GAPM-8000...
High
7.5
CVE-2019-20781
An issue was discovered in LG Bridge before April 2019...
High
7.8
Affected Vendor
Affected Software
lha.sys
Vulnerable Versions:
0
Timeline
Official Publish:
February 18th, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.