CVE-2014-2884: Truecrypt Project Truecrypt

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a (1) TC_IOCTL_OPEN_TEST or (2) TC_IOCTL_GET_SYSTEM_DRIVE_CONFIG IOCTL call.

Affected products

• Truecrypt Project Truecrypt: version 7.1 only

Published 2018-03-19. Last modified 2026-06-17.