The vulnerability of the ioctl component of the application management tools and Flatpak environments, which allows a hacker to trigger a service failure

The vulnerability of the ioctl device for application and Flatpak environments relates to the copying of text from the virtual console and its insertion into the command buffer, from which commands can be executed after the Flatpak application is closed. Exploiting this vulnerability could allow ...

SUSE CVE-2022-2153

A flaw was found in the Linux kernel's KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a...

The vulnerability of the development package for integrating cloud services and communication functions in IoT devices. The Kalay SDK, a microprogramming software for video surveillance cameras like Owlet Cam v1 and Owlet Cam v2, has a flaw related to the failure to eliminate special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands and increase their privileges.

The vulnerability of the development package for integrating cloud services and communication functions in IoT devices is related to the failure to remove special elements used in the operating system’s command set when executing system calls like IOCTL during the unpacking of updates. Exploiting...

CVE-2024-33220

An issue in the component AslO364.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

Nicomsoft WinI2C/DDC 安全漏洞

Nicomsoft WinI2C/DDC is a professional tool from Nicomsoft that allows you to control display devices via the DDC/CI protocol in a Windows environment. A security vulnerability exists in Nicomsoft WinI2C/DDC version v3.7.4.0, which originates from a security flaw in the component ddcdrv.sys. The...

PT-2024-25161 · Realtek Semiconductor · Realtek High Definition Audio Function Driver

Name of the Vulnerable Software and Affected Versions: Realtekr High Definition Audio Function Driver version 6.0.9549.1 Description: An issue in the component RTKVHD64.sys of Realtek Semiconductor Corp Realtekr High Definition Audio Function Driver allows attackers to escalate privileges and...

PT-2024-25164 · Insyde · Seg Windows Driver

Name of the Vulnerable Software and Affected Versions: Insyde Software Corp SEG Windows Driver version 100.00.07.02 Description: An issue in the component segwindrvx64.sys allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Recommendations: For...

PT-2024-25159 · Asus · Asus Atszio Driver

Name of the Vulnerable Software and Affected Versions: ASUS ATSZIO Driver version 0.2.1.7 Description: An issue in the component ATSZIO64.sys of the ASUS ATSZIO Driver allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Recommendations: For versi...

Realtek Semiconductor Corp Realtek lO Driver 安全漏洞

Realtek Semiconductor Corp Realtek lO Driver is a driver from Realtek Semiconductor Corp, China. A security vulnerability exists in Realtek Semiconductor Corp Realtek lO Driver version v1.008.0823.2017, which stems from a security flaw in the component rtkio64.sys. An attacker can exploit the...

UBUNTU-CVE-2021-47383

In the Linux kernel, the following vulnerability has been resolved: tty: Fix out-of-bound vmalloc access in imageblit This issue happens when a userspace program does an ioctl FBIOPUTVSCREENINFO passing the fbvarscreeninfo struct containing only the fields xres, yres, and bitsperpixel with values...

PT-2024-11338 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the compat ioctl implementation in the Linux kernel, where mistakes can lead to uninitialized kernel stack data being used as input for driver ioctl handlers...

CVE-2023-6321

A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially crafted command can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when an IOCTL call is interrupted by a signal...

PT-2024-19833 · Qualcomm · Snapdragon +72

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when an IOCTL call is interrupted by a signal. There is no information provided about the estimated...

kernel: nbd: fix incomplete validation of ioctl arg

A flaw has been found in the Linux kernel’s NBD drivers.The issue stems from incomplete validation of IOCTL arguments passed to the NBD driver. Specifically, oversized or unchecked arguments may lead to a signed integer overflow in blockwritefullpage and misuse of argument values cast to int in...

ASUS Fan Xpert 安全漏洞

ASUS Fan Xpert is an application for controlling case fans from the Chinese company Asus ASUS. It intelligently adjusts CPU and case fan speeds based on different climate conditions in different geographic regions and different ambient temperatures due to the computer's system load. A security...

SUSE CVE-2024-26778

In the Linux kernel, the following vulnerability has been resolved: fbdev: savage: Error out if pixclock equals zero The userspace program could pass any values to the driver through ioctl interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error. Although...

UBUNTU-CVE-2024-26777

In the Linux kernel, the following vulnerability has been resolved: fbdev: sis: Error out if pixclock equals zero The userspace program could pass any values to the driver through ioctl interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error. In...

PT-2024-5289 · Qualcomm · Qualcomm Embedded Platform Dsp Firmware

Name of the Vulnerable Software and Affected Versions: FastRPC affected versions not specified Qualcomm embedded platform DSP firmware affected versions not specified Description: The issue is related to memory corruption while processing an IOCTL handler in FastRPC. Additionally, there is a buff...

PT-2024-22816 · Unknown · Cg6Kwin2K.Sys

Name of the Vulnerable Software and Affected Versions: cg6kwin2k.sys versions prior to 2.1.7.0 Description: The issue is related to an exposed IOCTL with insufficient access control in the cg6kwin2k.sys driver. This allows a user without administrator privileges to send a specific IOCTL request a...