PT-2019-15860 · Idrix · Veracrypt

Published 2019-12-13 · Updated 2020-08-24 · CVE-2019-19501

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VeraCrypt version 1.24

Description The issue allows for local privilege escalation during the execution of VeraCryptExpander.exe.

Recommendations For VeraCrypt version 1.24, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-19501

Affected Products

Veracrypt

References · 4

• https://veracrypt.fr/en/Release%20Notes.html · Vendor Advisory
• https://veracrypt.fr/code/VeraCrypt/commit/?id=07bb27e3b94ee26128d5c7f800cdcf3232ff281a · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-19501 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19501 · Security Note