Listen to this Post
How the CVE Works
CVE-2025-29547 is a null pointer dereference vulnerability in Rollback Rx Professional 12.8.0.0, specifically in the driver file shieldm.sys. The flaw occurs when handling an IOCTL (Input/Output Control) request with the control code 0x96202000. A local user can exploit this by sending a malformed IOCTL request, causing the driver to dereference a null pointer. This leads to a system crash (Denial of Service). The vulnerability stems from insufficient validation of user-supplied input before processing the IOCTL request.
DailyCVE Form
Platform: Rollback Rx Professional
Version: 12.8.0.0
Vulnerability: Null Pointer Dereference
Severity: Medium
Date: 06/23/2025
Prediction: Patch expected by 08/2025
What Undercode Say
Check loaded drivers driverquery /v | findstr "shieldm.sys" Trigger PoC (simulated) python3 exploit.py --ioctl 0x96202000
How Exploit
- Local attacker sends crafted IOCTL request.
- Exploit crashes system via null dereference.
- No code execution, only DoS.
Protection from this CVE
- Apply vendor patch.
- Restrict driver access.
- Monitor IOCTL calls.
Impact
- System instability.
- Local DoS.
- No privilege escalation.
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
