Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the SENDACTIONFRAME IOCTL, a buffer over-read can occur if the payload length is less than 7...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts which can result in buffer overflow of msg cache...

CVE-2017-14903

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the SENDACTIONFRAME IOCTL, a buffer over-read can occur if the payload length is less than 7...

CVE-2017-9710

CVE-2017-9710 is described as a buffer overflow in the IOCTL path used to send QMI NOTIFY REQ messages in Android for MSM, Firefox OS for MSM, and CAF Android builds using the Linux kernel. The root cause is that the IOCTL interface can be invoked from multiple contexts, enabling a buffer overflo...

CVE-2017-11047

CVE-2017-11047 applies to Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel; the issue is in a graphics-driver ioctl handler where missing copy_from_user() calls can allow writes to kernel memory. Impact per CVSS indicates LOCAL access with LOW user interaction an...

CVE-2017-17112

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request...

CVE-2017-0864

An elevation of privilege vulnerability in the MediaTek ioctl flashlight. Product: Android. Versions: Android kernel. Android ID: A-37277147. References: M-ALPS03394571...

Privilege escalation

An elevation of privilege vulnerability in the MediaTek ioctl flashlight. Product: Android. Versions: Android kernel. Android ID: A-37277147. References: M-ALPS03394571...

CVE-2017-0864

CVE-2017-0864 is an elevation-of-privilege vulnerability in MediaTek ioctl (flashlight) exposed on Android kernels. Connected sources confirm the issue affects MediaTek ioctl flashlight within the Android kernel, enabling an attacker to gain elevated privileges. The CNVD entry explicitly describe...

Integer overflow

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a qbt1000 ioctl handler, an incorrect buffer size check has an integer overflow vulnerability potentially leading to a buffer overflow...

CVE-2017-9690

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a qbt1000 ioctl handler, an incorrect buffer size check has an integer overflow vulnerability potentially leading to a buffer overflow...

CVE-2017-14961

In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c...

Design/Logic Flaw

In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c...

CVE-2017-14961

In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c...

CVE-2017-14961

CVE-2017-14961 affects IKARUS anti.virus 2.16.7, where the ntguard.sys driver contains an Arbitrary Write vulnerability caused by not validating inputs from IOCTL 0x8300000c. This is a local privilege escalation flaw that can overwrite kernel memory and elevate privileges. Public sources document...

IKARUS anti.virus ntguard.sys driver local elevation of privilege vulnerability

IKARUS anti.virus is the Austrian IKARUS Security Software company a set of antivirus software products. ntguard.sys driver is one of the self-protection system driver . IKARUS anti.virus version 2.16.7 of the ntguard.sys driver has an arbitrary write vulnerability, the vulnerability stems from t...

Interface Aware Fuzzing for Kernel Drivers: DIFUZE

Device drivers are an essential part in modern Unix-like systems to handle operations on physical devices, from hard disks and printers to digital cameras and Bluetooth speakers. The surge of new hardware, particularly on mobile devices, introduces an explosive growth of device drivers in system...

Linux kernel local denial of service vulnerability (CNVD-2017-33480)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'kvmvmioctlcheckextension' function in the arch/powerpc/kvm/powerpc.c file in versions of the Linux kernel prior ...

CVE-2017-15306

The kvmvmioctlcheckextension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash via a KVMCHECKEXTENSION KVMCAPPPCHTM ioctl call to /dev/kvm...

UBUNTU-CVE-2017-15306

The kvmvmioctlcheckextension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash via a KVMCHECKEXTENSION KVMCAPPPCHTM ioctl call to /dev/kvm...