CVE-2018-19523

The CVE identifies DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, as vulnerable to a local IOCTL (0x80002068) that accepts a user-defined buffer size. If the supplied buffer is smaller than 512 bytes, the driver may overwrite the next pool header adjacent to the user buffer’s poo...