PT-2025-11525 · Iobit · Iobit Malware Fighter

Published 2025-03-17 · Updated 2026-04-01 · CVE-2025-26125

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IObit Malware Fighter version 12.1.0

Description An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter allows attackers to arbitrarily delete files and escalate privileges.

Recommendations As a temporary workaround, consider disabling the IMFForceDelete driver until a patch is available. Restrict access to the IMFForceDelete driver to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

LPE

Weakness Enumeration

CWE-782

Related Identifiers

CVE-2025-26125

Affected Products

Iobit Malware Fighter

References · 13

• 🔥 https://github.com/ZeroMemoryEx/CVE-2025-26125 · Exploit
• https://osv.dev/vulnerability/CVE-2025-26125 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26125 · Security Note
• https://github.com/ZeroMemoryEx/IObit-EoP · Note
• https://twitter.com/CVEnew/status/1901690851681534000 · Twitter Post
• https://twitter.com/VivekIntel/status/2039338381851951163 · Twitter Post
• https://x.com/zeromemoryex/status/1876878269200449819 · Note
• https://t.me/cvenotify/115885 · Telegram Post
• https://twitter.com/akaclandestine/status/1919329740659302437 · Twitter Post
• https://t.me/cvedetector/20511 · Telegram Post
• https://twitter.com/UndercodeUpdate/status/1904324304105357810 · Twitter Post
• https://reddit.com/r/cybersecurity/comments/1s9epyv/ven0m_ransomware_how_a_byovd_technique_using_a · Reddit Post
• https://t.me/cvetracker/19303 · Telegram Post