CVE-2019-8372

7.0 highEPSS 0.5%

High (7.0) in lg lha.sys. EPSS 0.5% chance of exploitation in the next 30 days.

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link and an open DACL.

Severity

CVSS 3.0

7.0 high

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2019-02-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lg:lha.sys

References

http://www.jackson-t.ca/lg-driver-lpe.html
https://lgsecurity.lge.com/security_updates.html
https://twitter.com/Jackson_T/status/1097353402034475009
http://www.jackson-t.ca/lg-driver-lpe.html
https://lgsecurity.lge.com/security_updates.html

Check your stack JSON