CVE-2021-40425

An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B03 of Webroot Secure Anywhere 21.4. A specially-crafted executable can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability. An out-of-bounds read vulnerability exists in the IOCTL...

CVE-2021-40425

An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B03 of Webroot Secure Anywhere 21.4. A specially-crafted executable can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability. An out-of-bounds read vulnerability exists in the IOCTL...

CVE-2021-40425

CVE-2021-40425 affects Webroot Secure Anywhere 21.4. The vulnerability is an out-of-bounds read in the device driver WRCore_x64 and related IOCTL handlers (IOCTL GetProcessCommand and IOCTL_B03). The issue stems from insufficient bounds validation when constructing a getProcessInfo/webroot_irp st...