PT-2024-22816 · Unknown · Cg6Kwin2K.Sys

Name of the Vulnerable Software and Affected Versions: cg6kwin2k.sys versions prior to 2.1.7.0 Description: The issue is related to an exposed IOCTL with insufficient access control in the cg6kwin2k.sys driver. This allows a user without administrator privileges to send a specific IOCTL request a...

Sangoma cg6kwin2k.sys 安全漏洞

Sangoma cg6kwin2k.sys is a configuration program from Sangoma Canada. A security vulnerability exists in Sangoma cg6kwin2k.sys versions prior to 2.1.7.0, which stems from vulnerability to insufficient IOCTL access control, where by sending a specific IOCTL request, a user without administrator...

PT-2024-21260 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions, however, a file named bigo.c is referenced, which may imply the vulnerable software is related to this file. Given the lack of explicit version information, the...

Micro-Star International Afterburner Code Issue Vulnerability

Micro-Star International Afterburner is a graphics card overclocking utility program from Micro-Star International Taiwan, China. A code issue vulnerability exists in Micro-Star International Afterburner version v4.6.5.16370, which originates from a denial of service vulnerability by triggering t...

PT-2024-13120 · Unknown · Automotive Multimedia

Name of the Vulnerable Software and Affected Versions: Automotive Multimedia affected versions not specified Description: The issue is related to memory corruption that occurs when invoking IOCTLs calls in Automotive Multimedia. Recommendations: At the moment, there is no information about a newe...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when calling IOCTL in automotive multimedia...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an information disclosure when processing IOCTL requests in FastRPC...

CVE-2021-46979

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix ioctl handlers removal Currently ioctl handlers are removed twice. For the first time during iiodeviceunregister then later on inside iiodeviceunregistereventset and iiobuffersfreesysfsandmask. Double free leads to...

PT-2024-5375 · Zemana · Zemana Antilogger

Name of the Vulnerable Software and Affected Versions: Zemana AntiLogger version 2.74.204.664 Description: The issue is related to the incorrect validation of a critical resource in the IOCTL Handler component of the zam64.sys and zamguard64.sys drivers in Zemana AntiLogger. This can be exploited...

CVE-2024-23439

Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0x22203F, 0x222057 and 0x22205B IOCTL codes of the Vba32m64.sys driver...

CVE-2024-1096

Twister Antivirus v8.17 is vulnerable to a Denial of Service vulnerability by triggering the 0x80112067, 0x801120CB 0x801120CC 0x80112044, 0x8011204B, 0x8011204F, 0x80112057, 0x8011205B, 0x8011205F, 0x80112063, 0x8011206F, 0x80112073, 0x80112077, 0x80112078, 0x8011207C and 0x80112080 IOCTL codes ...

VulnCheck KEV: CVE-2024-21338

Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL input and output control dispatcher in appid.sys that allows a local attacker to achieve privilege escalation...

CVE-2024-23441

Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver...

Topaz Antifraud wsftprm.sys security vulnerability

Topaz Antifraud is a business application from Topaz, Inc. provides defined processes, integrations and customizable rules to optimize costs and provide a secure ecosystem for your business. A security vulnerability exists in Topaz Antifraud wsftprm.sys version 2.0.0.0, which stems from a...

CVE-2023-22668

Memory Corruption in Audio while invoking IOCTLs calls from the user-space...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption in audio when calling IOCTL from user space...

PT-2023-24146 · Qualcomm · 315 5G Iot Modem Firmware +171

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in HLOS when IOCTL calls are invoked from user-space. This can potentially lead to unintended system behavior or...

PT-2023-9585 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions prior to WSA8835 Description: The issue is related to memory corruption that occurs when sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call. This can...

The vulnerability of the kernel driver (pdfwkrnl.sys) of AMD Radeon graphics processors allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the kernel driver pdfwkrnl.sys of AMD Radeon graphics processors is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code by sending specially crafted IOCTL requests...

Advanced Micro Devices Windows kernel drivers vulnerable to insufficient access control on its IOCTL

Overview Multiple Windows kernel drivers provided by Advanced Micro Devices Inc. are vulnerable to insufficient access control on its IOCTL CWE-782, CVE-2023-20598. Takahiro Haruyama of VMware reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By sending a...