633 matches found
The vulnerability of the GPU Display Driver, related to insufficient input data validation, allows attackers to trigger a service failure.
The vulnerability of the GPU Display Driver is related to incorrect data validation for the user pointer in the handler nvlddmkm.sys for DxgkDdiEscape or IOCTL. Exploiting this vulnerability can allow an attacker to cause a service failure...
Qualcomm 组件资源管理错误漏洞
The Qualcomm component is a component of Qualcomm Incorporated Qualcom. The Qualcomm component is an intrinsic part of Qualcomm devices. A resource management error vulnerability exists in the Qualcomm component that stems from a contention between the ioctl register and the logout event...
CVE-2021-27203
In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL codes using METHODNEITHER results in arbitrary memory dereferencing...
CVE-2021-27203
In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL codes using METHODNEITHER results in arbitrary memory dereferencing...
CVE-2020-9453
In Epson iProjection v2.30, the driver file EMPMPAU.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. 0x9C402402 has only a NULL pointer dereference. This affects...
IObit Advanced SystemCare Security Vulnerability
Iobit IOBit Advanced SystemCare is a system management utility program from the British company IOBit Iobit. The program is mainly used for scanning, repairing, and optimizing the system, among other things. A security vulnerability exists in IObit Advanced SystemCare 13.2 that allows an...
PT-2021-2438 · Nvidia +2 · Nvidia Gpu Display Driver +2
Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows and Linux, all versions Description: The issue is related to improper validation of a user pointer in the kernel mode layer handler for DxgkDdiEscape or IOCTL, which may lead to denial of service. The...
PT-2022-4817 · Linux +9 · Linux Kernel +9
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a boundary error when setting a font with malicious data using the ioctl cmd PIO FONT, which can cause the kernel to write memory out of bounds. This can...
kernel: use-after-free in drivers/bluetooth/hci_ldisc.c
A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hciuartsetproto function in drivers/bluetooth/hcildisc.c. The flaw in this function can cause memory corruption or ...
CVE-2020-15480
An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The kernel driver exposes IOCTL functionality that allows low-privilege users to read and write to arbitrary Model Specific Registers MSRs. This could lead to arbitrary Ring-0 code...
The vulnerability of the ftusbbus2.sys component of the FabulaTech USB for Remote Desktop software allows a hacker to gain elevated privileges.
The vulnerability of the ftusbbus2.sys component of the FabulaTech USB for Remote Desktop software relates to privilege management errors. Exploiting this vulnerability allows an attacker to enhance their privileges by using a specially crafted system call, IoCtl...
kernel: null-pointer dereference in hci_uart_set_flow_control
A flaw was found in the Linux kernel’s Bluetooth implementation of UART. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash...
CVE-2019-15663
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 1 of 2...
CVE-2019-15665
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary write primitive that can lead to code execution or escalation of privileges...
Parallels Desktop Buffer Overflow Vulnerability
Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Corel Canada. A buffer overflow vulnerability exists in the IOCTL processor in Parallels Desktop, which stems from the program failing to properly validate user-submitted data. An attacker could exploit the...
Vulnerability of drivers/bluetooth/hci_ath.c, drivers/bluetooth/hci_bcm.c, drivers/bluetooth/hci_intel.c, drivers/bluetooth/hci_ldisc.c, drivers/bluetooth/hci_mrvl.c, drivers/bluetooth/hci_qca.c, and drivers/bluetooth/hci_uart.h for Linux operating system’s Bluetooth-enabled UART adapters, allowing a hacker to cause a service failure
The vulnerabilities in the drivers/bluetooth/hciath.c, drivers/bluetooth/hcibcm.c, drivers/bluetooth/hciintel.c, drivers/bluetooth/hcildisc.c, drivers/bluetooth/hcimrvl.c, drivers/bluetooth/hciqca.c, and drivers/bluetooth/hciuart.h files for UART-connected Bluetooth adapters in Linux operating...
hw: Intel GPU Denial Of Service while accessing MMIO in lower power state
A flaw was found in Intel graphics hardware GPU where a local attacker with the ability to issue an ioctl could trigger a hardware level crash if MMIO registers were read while the graphics card was in a low-power state. This creates a denial of service situation and the GPU and connected display...
kernel: null-pointer dereference in hci_uart_set_flow_control
A flaw was found in the Linux kernel’s Bluetooth implementation of UART. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash...