Executive brief
The Windows Universal Disk Format (UDF) file system driver is a core component that handles reading and writing data from UDF-formatted optical discs and other media. A heap-based buffer overflow in this driver allows an attacker with local system access to execute arbitrary code with elevated privileges, potentially leading to complete system compromise or data theft.
Technical details
A heap-based buffer overflow vulnerability exists in the Windows UDFS driver that can be triggered by an authorized attacker with local access. The vulnerability arises in the driver's handling of specially crafted UDF file system structures, allowing an attacker to overflow a heap buffer and corrupt memory. By crafting malicious UDF media or file system structures, an attacker can overwrite adjacent heap memory to achieve arbitrary code execution in the context of the kernel-mode driver, resulting in privilege escalation from user to system level. The vulnerability requires local access but does not require user interaction beyond mounting or accessing a malicious UDF-formatted media.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed