657 matches found
DrvEye
drivertool A static-analysis & exploitation-triage toolkit...
EUVD-2025-209526
STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabli...
CVE-2025-70795
The Safetica Application suite, specifically the STProcessMonitor component in version 11.11.4.0 , contains a security vulnerability. The root cause is insufficient caller validation in the driver's IOCTL handler, which allows an admin-privileged user to send a crafted IOCTL request (0xB822200C )...
CVE-2025-70795
STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabli...
CVE-2025-70795
STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabli...
The vulnerability in the implementation of the system call ioctl of the MxGeneralIo utility allows a attacker to escalate their privileges and cause a service failure.
The vulnerability in the implementation of the ioctl utility MxGeneralIo is related to an open IOCTL with insufficient access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges and cause service failures...
The vulnerability of the ASUS Business System Control Interface arises from reading data beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of the ASUS Business System Control Interface relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by sending a specially crafted IOCTL request...
The vulnerability in the implementation of IOCTL commands in Qualcomm’s embedded software allows a hacker to damage memory.
The vulnerability of the IOCTL command implementation in Qualcomm’s embedded software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause memory corruption...
The vulnerability in the implementation of IOCTL commands in Qualcomm’s embedded software allows a hacker to damage memory.
The vulnerability of the IOCTL command implementation in Qualcomm’s embedded software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to damage the memory...
CVE-2026-29923
The pstrip64.sys driver in EnTech Taiwan PowerStrip =3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures...
CVE-2026-29923
The pstrip64.sys driver in EnTech Taiwan PowerStrip =3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures...
CVE-2026-4483
An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers. The affected utility, MxGeneralIo, exposes IOCTL methods that permit direct read and write access to MSR and system memory. A local attacker wit...
CVE-2026-21378
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...
CVE-2026-21372
Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations...
CVE-2026-21375
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing...
CVE-2026-21373
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing...
CVE-2026-21380
Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory...
PT-2026-30843
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 1 of 2...
EUVD-2025-209245
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking ...