CVE-2022-3699 PoC — Lenovo Diagnostics 缓冲区错误漏洞

Description

Proof of Concept exploit for CVE-2022-3699

介绍

# CVE-2022-3699
Proof of Concept exploit for CVE-2022-3699

Exploit tested on Windows 10 22H2 build 19045.4651 and build 19045.3803

Vulnerability deals with allowing unprivileged users to access functionality that lets you read and write from physical memory from the instance of the kernel, however since the primitives deal with physical memory there's a bit of extra work needed to weaponize it

Stole the idea for getting the virtual read primitive from alfarom256 who got it from ch3rn0byl

![image](https://github.com/user-attachments/assets/20cbf2a5-85c4-4e7e-a807-ccadd12b2ca8)

文件快照

备注