CVE-2017-15921: Watchdogdevelopment Anti-Malware

High severity, CVSS 7.5. EPSS: 7.6% chance of exploitation in the next 30 days.

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they are not validated.

Affected products

Published 2017-10-30. Last modified 2026-06-17.