EUVD-2024-54383

Malicious code in bioql PyPI...

CVE-2024-29216

Exposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0. By sending a specific IOCTL request, a user without the administrator privilege may perform I/O to arbitrary hardware port or physical address, resulting in erasing or altering the firmware...

CVE-2023-33078

Information Disclosure while processing IOCTL request in FastRPC...

CVE-2019-1010208

IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 Veracrypt, all versions Truecrypt is affected by: Buffer Overflow. The impact is: Minor information disclosure of kernel stack. The component is: Veracrypt NT Driver veracrypt.sys. The attack vector is: Locally executed code, IOCTL...

CVE-2025-21462

Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit...

CVE-2025-21462

Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit...

CVE-2025-21462 Out-of-bounds Write in Computer Vision

Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit...

CVE-2025-21462

CVE-2025-21462 describes memory corruption in Qualcomm chipsets during IOCTL processing when the input buffer greatly exceeds the command argument limit, effectively an out-of-bounds/write scenario. The vulnerability is evidenced across multiple feeds (NVD, Red Hat, CVE List) with the same descri...

PT-2025-19878 · Qualcomm · Snapdragon +12

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to memory corruption that occurs while processing an IOCTL request. This happens when the buffer significantly exceeds the command argument limit. Recommendations: At th...

CVE-2024-45540

Memory corruption while invoking IOCTL map buffer request from userspace...

CVE-2024-45540 Use After Free in HLOS

Memory corruption while invoking IOCTL map buffer request from userspace...

CVE-2024-45540 Use After Free in HLOS

Memory corruption while invoking IOCTL map buffer request from userspace...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fixed OOB issues when building SMB2IOCTL requests. When encryption is used, whether enforced by the server or when using the “seal” mount option, the client will squash all compound request buffers into a single iov...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

CVE-2023-28293 – Vulnerable Driver Exploit Local Privilege Esca...

DEBIAN-CVE-2024-50151

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2IOCTL request When using encryption, either enforced by the server or when using 'seal' mount option, the client will squash all compound request buffers down for encryption into a single i...

kernel: arp: Prevent overflow in arp_req_get().

A vulnerability was found in the arpreqget function in the Linux kernel when handling the SIOCGARP ioctl input/output control request. This function copies data over into a fixed-length buffer which could result in a buffer overflow and cause memory corruption, undefined behavior, or crashes...

CVE-2024-29216

The CVE-2024-29216 issue affects the Sangoma cg6kwin2k.sys driver (cg6kwin2k.sys) prior to version 2.1.7.0. A user without administrator privileges can send a crafted IOCTL, enabling I/O to arbitrary hardware ports or physical addresses and potentially erasing or altering firmware. Affected compo...

Information disclosure

Information Disclosure while processing IOCTL request in FastRPC...

CVE-2023-33078 Buffer Over-read in DSP Services

Information Disclosure while processing IOCTL request in FastRPC...

CVE-2023-20598

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution...