657 matches found
PT-2024-5375 · Zemana · Zemana Antilogger
Name of the Vulnerable Software and Affected Versions: Zemana AntiLogger version 2.74.204.664 Description: The issue is related to the incorrect validation of a critical resource in the IOCTL Handler component of the zam64.sys and zamguard64.sys drivers in Zemana AntiLogger. This can be exploited...
CVE-2024-1096
Twister Antivirus v8.17 is vulnerable to a Denial of Service vulnerability by triggering the 0x80112067, 0x801120CB 0x801120CC 0x80112044, 0x8011204B, 0x8011204F, 0x80112057, 0x8011205B, 0x8011205F, 0x80112063, 0x8011206F, 0x80112073, 0x80112077, 0x80112078, 0x8011207C and 0x80112080 IOCTL codes ...
CVE-2024-23439
Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0x22203F, 0x222057 and 0x22205B IOCTL codes of the Vba32m64.sys driver...
VulnCheck KEV: CVE-2024-21338
Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL input and output control dispatcher in appid.sys that allows a local attacker to achieve privilege escalation...
CVE-2024-23441
Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver...
Topaz Antifraud wsftprm.sys security vulnerability
Topaz Antifraud is a business application from Topaz, Inc. provides defined processes, integrations and customizable rules to optimize costs and provide a secure ecosystem for your business. A security vulnerability exists in Topaz Antifraud wsftprm.sys version 2.0.0.0, which stems from a...
CVE-2023-22668
Memory Corruption in Audio while invoking IOCTLs calls from the user-space...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption in audio when calling IOCTL from user space...
PT-2023-24146 · Qualcomm · 315 5G Iot Modem Firmware +171
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in HLOS when IOCTL calls are invoked from user-space. This can potentially lead to unintended system behavior or...
PT-2023-9585 · Qualcomm · Qualcomm Snapdragon Auto
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions prior to WSA8835 Description: The issue is related to memory corruption that occurs when sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call. This can...
The vulnerability of the kernel driver (pdfwkrnl.sys) of AMD Radeon graphics processors allows a hacker to escalate their privileges and execute arbitrary code.
The vulnerability of the kernel driver pdfwkrnl.sys of AMD Radeon graphics processors is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code by sending specially crafted IOCTL requests...
Advanced Micro Devices Windows kernel drivers vulnerable to insufficient access control on its IOCTL
Overview Multiple Windows kernel drivers provided by Advanced Micro Devices Inc. are vulnerable to insufficient access control on its IOCTL CWE-782, CVE-2023-20598. Takahiro Haruyama of VMware reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By sending a...
AMD Radeon Security Vulnerability
AMD Radeon is a device driver and utility package for Advanced Micro Devices graphics cards and GPUs from UltraMicro Semiconductor AMD. A security vulnerability exists in the AMD Radeon Graphics driver that stems from improper privilege management and could allow an authenticated attacker to craf...
The vulnerability of embedded software in Qualcomm products is caused by a situation where hackers can influence the privacy, integrity, and accessibility of protected information.
The vulnerability of embedded Qualcomm software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through calls to the IOCTL munmap command...
VulnCheck KEV: CVE-2023-33107
Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call...
The vulnerability of the IOCTL component of the AMD uProf software profiling tool allows a hacker to load an unsigned driver and execute arbitrary code.
The vulnerability of the IOCTL component of the AMD uProf software profiling tool is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to load unsigned drivers and execute arbitrary code...
Phoenix Technologies Windows kernel driver vulnerable to insufficient access control on its IOCTL
Overview Some of the Windows kernel drivers provided by Phoenix Technologies Inc. is vulnerable to insufficient access control on its IOCTL CWE-782, CVE-2023-35841. Takahiro Haruyama of VMware reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By sending a...
kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds
An out-of-bounds write flaw was found in the Linux kernel’s console driver functionality in the way a user triggers the ioctl PIOFONT with malicious data. This flaw allows a local user to crash or potentially escalate their privileges on the system...
CVE-2023-20564
Insufficient validation in the IOCTL Input Output Control input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform memory reads/writes potentially leading to a loss of confidentiality or arbitrary kernel execution...
CVE-2023-20560
Insufficient validation of the IOCTL Input Output Control input buffer in AMD Ryzen™ Master may allow a privileged attacker to provide a null value potentially resulting in a Windows crash leading to denial of service...