CVE-2019-8372

HIGH 7.0CVE-2019-8372 · Published 18/02/2019 · updated 17/06/2026

In short

CVE-2019-8372 is a HIGH (CVSS 7.0) vulnerability affecting lha.sys (lg).
Chance of exploitation in the next 30 days (EPSS): 0.54%, higher than 45.2% of all vulnerabilities.
Fix: update to 1.1.1811.2101 or later.

Package	Affected versions	Patched versions
lha.sys lg	`< 1.1.1811.2101`	`1.1.1811.2101`

Description

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link and an open DACL.

References

jackson-t.ca/lg-driver-lpe.html · Exploit
lgsecurity.lge.com/security_updates.html · Vendor Advisory
twitter.com/Jackson_T/status/1097353402034475009 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free