CVE-2024-55408

An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied...

CVE-2024-55407

The ITE IO Access v1.0.0.0 software by ITE Tech. Inc contains a vulnerability in the DeviceloControl function. An attacker can perform arbitrary port read and write actions by supplying crafted IOCTL requests , potentially leading to unauthorized data modification or access. As a temporary workar...

PT-2025-2701

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Compute affected versions not specified Description The issue is related to memory corruption that occurs when an IOCTL call is invoked from user-space to write board data to the WLAN driver. This can lead to potential...

PT-2025-2700

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Compute affected versions not specified Description The issue is related to memory corruption that occurs when an IOCTL call is invoked from user-space to read board data. This can lead to unauthorized access and potentiall...

CVE-2024-45550: Improper Validation of Array Index

Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls...

CVE-2024-45546: Buffer Over-read

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space...

CVE-2024-45542: Stack-based Buffer Overflow

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...

CVE-2024-33061: Buffer Over-read

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...

CVE-2024-33059: Use After Free

Memory corruption while processing frame command IOCTL calls...

CVE-2024-33055: Use After Free

Memory corruption while invoking IOCTL calls to unmap the DMA buffers...

CVE-2024-33041: Use of Out-of-range Pointer Offset

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,...

CVE-2024-55407: Improper Validation of Specified Quantity in Input

An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary port read and write actions via supplying crafted IOCTL requests...

CVE-2024-55408: Missing Authorization

An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied...

CVE-2024-45548: Buffer Over-read

Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call...

CVE-2025-0222

A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be...

CVE-2025-0223 IObit Protected Folder IOCTL IURegistryFilter.sys 0x8001E010 null pointer dereference

A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference...

CVE-2025-0223 IObit Protected Folder IOCTL IURegistryFilter.sys 0x8001E010 null pointer dereference

A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference...

CVE-2025-0222 IObit Protected Folder IOCTL IUProcessFilter.sys 0x8001E004 null pointer dereference

A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be...

CVE-2025-0221

IOBit Protected Folder (up to v1.3.0) is affected by a vulnerability in the IOCTL Handler’s pffilter.sys function 0x22200c that can trigger a null pointer dereference. Exploitation is described as local, with the exploit disclosed publicly and no vendor response reported. A practical mitigation f...

CVE-2025-0222: NULL Pointer Dereference

A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be...