CVE-2018-15499

CVE-2018-15499 affects GEAR Software products that include GEARAspiWDM.sys (2.2.5.0). The issue is a denial-of-service vulnerability caused by not validating user‑mode memory availability before writing to it; a memory validity check is only performed at the start of a long subroutine. The result...