Malwarebytes Out-of-Bounds Read Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Malwarebytes versions 4.x prior to 4.6.14.326 and in 5.x prior to 5.1.5.116. This issue is also present in the Nebula platform for Endpoint Agent versions prior to 2.0.0.64 and Protection Service versions prior to 4.6.17.334. The vulnerability arises from out-of-bounds reads in string detection utilities, which can cause system crashes.

Impact

Exploitation of this vulnerability leads to system crashes, causing a denial-of-service condition.

Remediation

Users are advised to upgrade to Malwarebytes versions 4.6.14.326 or 5.1.5.116. For the Nebula platform, upgrade to Endpoint Agent version 2.0.0.64 or later and Protection Service version 4.6.17.334 or later.