← Vulnerability feed

Vulnerability record · CVE-2024-1443 · published 7 March 2024

CVE-2024-1443: Msi afterburner null pointer dereference vulnerability

Msi · Afterburner

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process.

4.4 CVSS 3.1 Medium EPSS 0.23% · top 87.9% CWE-476 · NULL pointer dereference
4.4CVSS 3.1 base score
0.23%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://fluidattacks.com/advisories/coltrane/ ExploitMitigationThird Party Advisory
https://www.msi.com/Landing/afterburner/graphics-cards Product
https://fluidattacks.com/advisories/coltrane/ ExploitMitigationThird Party Advisory
https://www.msi.com/Landing/afterburner/graphics-cards Product

Track CVE-2024-1443 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2019-16098Msi afterburner out-of-bounds read vulnerabilityThe driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary…EPSS 20%4.4CVE-2024-1460Msi afterburner information exposure vulnerabilityMSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. …EPSS 0.24%6.2CVE-2026-21525Windows Remote Access Connection Manager null pointer dereference DoSWindows Remote Access Connection Manager contains a null pointer dereference (CWE-476) that lets an unauthorized attacker deny service locally. The f…KEVEPSS 4.8%analysed

Source: NIST National Vulnerability Database (record CVE-2024-1443), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.