Vulnerability of drivers/bluetooth/hci_ath.c, drivers/bluetooth/hci_bcm.c, drivers/bluetooth/hci_intel.c, drivers/bluetooth/hci_ldisc.c, drivers/bluetooth/hci_mrvl.c, drivers/bluetooth/hci_qca.c, and drivers/bluetooth/hci_uart.h for Linux operating system’s Bluetooth-enabled UART adapters, allowing a hacker to cause a service failure

The vulnerabilities in the drivers/bluetooth/hciath.c, drivers/bluetooth/hcibcm.c, drivers/bluetooth/hciintel.c, drivers/bluetooth/hcildisc.c, drivers/bluetooth/hcimrvl.c, drivers/bluetooth/hciqca.c, and drivers/bluetooth/hciuart.h files for UART-connected Bluetooth adapters in Linux operating...

hw: Intel GPU Denial Of Service while accessing MMIO in lower power state

A flaw was found in Intel graphics hardware GPU where a local attacker with the ability to issue an ioctl could trigger a hardware level crash if MMIO registers were read while the graphics card was in a low-power state. This creates a denial of service situation and the GPU and connected display...

kernel: null-pointer dereference in hci_uart_set_flow_control

A flaw was found in the Linux kernel’s Bluetooth implementation of UART. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash...

CVE-2019-13156

NDrive1.2.2.sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle...

CVE-2019-3954

Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 81024 RPC call...

UBUNTU-CVE-2019-10142

A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an ioctl was incorrectly validated and used in size calculations for the page size calculation. An attacker can use this flaw to crash the syste...

The vulnerability of the dwprot.sys driver in the Dr.Web Enterprise Security Suite antivirus protection software allows a hacker to cause a service failure.

The vulnerability of the dwprot.sys driver in the Dr.Web Enterprise Security Suite antivirus software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using specially crafted IOCTLs...

Symantec Endpoint Protection Information Disclosure Vulnerability

Symantec Endpoint Protection is a suite of antivirus software from Symantec USA. The software provides security across physical and virtual systems. An information disclosure vulnerability exists in the 0x224844 IOCTL handler function of the ccSetx86.sys file in Symantec Endpoint Protection Small...

CVE-2018-6269

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control IOCTL handling for user mode requests could create a non-trusted pointer dereference, which may lead to information disclosure, denial of service, escalation of privileges, or code execution. The updates...

Advantech WebAccess Access Control Error Vulnerability

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. An Access Control Error vulnerability exist...

The vulnerability of the IOCTL processor 0x8200E804 of the software device with hardware security keys WibuKey allows a perpetrator to exploit memory access on the kernel level.

The vulnerability of the IOCTL handler 0x8200E804 of the WibuKey.sys software driver involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access kernel memory through a specially crafted IRP request input/output request...

CVE-2019-8372

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link...

Wibu-Systems WibuKey Elevation of Privilege Vulnerability

Wibu-Systems WibuKey is a digital rights management DRM system from Wibu-Systems. A security vulnerability exists in the 0x8200E804 IOCTL handler in Wibu-Systems WibuKey version 6.40 Build 2400. An attacker can exploit the vulnerability by sending a specially crafted IRP request to corrupt memory...

WIBU-SYSTEMS WibuKey.sys 0x8200E804 IOCTL Kernel Information Disclosure Vulnerability

Wibu-Systems WibuKey is a digital rights management DRM system from Wibu-Systems. A security vulnerability in WIBU-SYSTEMS WibuKey.sys 0x8200E804 IOCTL handling allows local attackers to exploit the vulnerability by submitting a special request to obtain a kernel memory information disclosure...

CVE-2018-3990

An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 Build 2400. A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation. An...

CVE-2018-3989

An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 Build 2400.A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker ca...

Antiy AVL ATool Buffer Overflow Vulnerability

Antiy AVL ATool is a security management tool with anti-virus features from Antiy Labs in China. A buffer overflow vulnerability in the handling of IOCTL 0x80002004 by the ssdt.sys kernel driver in Antiy AVL ATool version 1.0.0.22 can be exploited by a local attacker to execute arbitrary code in...

CVE-2018-19650

Local attackers can trigger a stack-based buffer overflow on vulnerable installations of Antiy-AVL ATool security management v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-3970

An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to...

CVE-2018-3971

An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data under controlled by an attacker address, resulting in memory corruption. An attacker can send IRP...