CVE-2024-45540

CVE-2024-45540 is a memory corruption vulnerability in Qualcomm chipset components related to processing user-space IOCTL mapped buffer requests. Multiple sources (NVD, Red Hat, CVE List, CNNVD, CIRCL) report the issue as memory corruption tied to an IOCTL map-buffer path, with the Pixel Watch bu...

CVE-2024-33218

An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33224

An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33219

An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33220

An issue in the component AslO364.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33226

An issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-55408

An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied...

CVE-2024-55410

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-55410

An issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component of Asus GPU Tweak II Program Driver v1.0.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55414

CVE-2024-55414 concerns the Motorola SM56 Modem WDM Driver (SmSerl64.sys) v6.12.23.0. The initial description states a low‑privilege user can map physical memory via crafted IOCTLs, enabling privilege escalation, potentially code execution with high privileges, and information disclosure; signed ...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55410

...

CVE-2024-55411

CVE-2024-55411 affects the SUNIX Multi I/O Card, specifically the snxpcamd.sys driver (v10.1.0.0). The vulnerability allows an attacker to perform arbitrary read and write actions by sending crafted IOCTL requests to the affected driver. The root cause is exploitation of IOCTL handling within snx...

PT-2025-3114 · Sunix · Sunix Parallel Driver X64

Name of the Vulnerable Software and Affected Versions: SUNIX Parallel Driver x64 version 10.1.0.0 Description: A vulnerability exists in the driver snxppamd.sys, allowing low-privileged users to read and write arbitrary I/O ports via specially crafted IOCTL requests. This can be exploited for...

CVE-2024-55408

An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied...

CVE-2024-55407

An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary port read and write actions via supplying crafted IOCTL requests...

CVE-2024-55407

ITE IO Access 1.0.0.0 contains a vulnerability in the DeviceloControl function that lets a local attacker perform arbitrary port read and write actions by supplying crafted IOCTL requests. The issue, reported across multiple sources (NVD, Red Hat, CNNVD, PT Security, etc.), indicates the underlyi...

CVE-2024-55408

An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied...

CVE-2024-55408

In CVE-2024-55408, the affected component is the Asus System Analysis IO driver (AsusSAIO.sys). The root cause is improper access control in the driver, which may allow misuse of software functionality when crafted IOCTL requests are supplied. The documented impact is the ability to perform arbit...