CVE-2022-43590: Callback Cbfs Filter

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A null pointer dereference vulnerability exists in the handle_ioctl_0x830a0_systembuffer functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.

Affected products

• Callback Cbfs Filter: version 20.0.8317 only

Published 2022-11-28. Last modified 2026-06-17.