CVSS 3.0
3.3 lowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCVE-2019-1010208
Low (3.3) in idrix. EPSS 0.5% chance of exploitation in the next 30 days.
IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 (Veracrypt), all versions (Truecrypt) is affected by: Buffer Overflow. The impact is: Minor information disclosure of kernel stack. The component is: Veracrypt NT Driver (veracrypt.sys). The attack vector is: Locally executed code, IOCTL request to driver. The fixed version is: 1.23-Hotfix-1.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- idrix:truecrypt
- idrix:veracrypt