CVE-2015-5466

Silicon Integrated Systems XGI WindowsXP Display Manager aka XGI VGA Driver Manager and VGA Display Manager 6.14.10.1090 allows local users to gain privileges via a crafted 0x96002404 IOCTL call...

PT-2020-7863

Name of the Vulnerable Software and Affected Versions: Silicon Integrated Systems XGI WindowsXP Display Manager version 6.14.10.1090 Description: The issue allows local users to gain privileges through a crafted 0x96002404 IOCTL call. Recommendations: For version 6.14.10.1090, consider restrictin...

CVE-2015-5466: Improper Privilege Management

Silicon Integrated Systems XGI WindowsXP Display Manager aka XGI VGA Driver Manager and VGA Display Manager 6.14.10.1090 allows local users to gain privileges via a crafted 0x96002404 IOCTL call...

PT-2020-2224

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.14 Description The issue is related to the mptctl ioctl function in drivers/message/fusion/mptctl.c and involves synchronization errors when using a shared resource. This can lead to a race condition,...

Null pointer dereference

An invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution via usermode because 0x9C402405 using METHODNEITHER results in a read primitive...

CVE-2017-18550

A flaw was found in drivers/scsi/aacraid/commctrl.c in the Linux kernel, where there is potential exposure of kernel stack memory because the aacgethbainfo function, does not initialize the hbainfo structure. An attacker with relevant permissions can issue ioctl to an aacraid device. Mitigation...

CVE-2019-19332

An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVMGETEMULATEDCPUID' ioctl2 request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device...

PT-2019-4874 · Qemu +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU versions 2.4.0 through 4.2.0 Description: An issue was discovered in the ide dma cb function, which can cause the QEMU process in the host system to crash via a special SCSI IOCTL SEND COMMAND. This issue implies that the size of...

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0266)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel-rt packages installed that are affected by multiple vulnerabilities: - The bnepsockioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a...

Kyrol Internet Security Invalid Pointer Vulnerability

Kyrol Internet Security is an antivirus product from Malaysia. An invalid pointer vulnerability exists in the IOCTL handling of the kyrld.sys driver in Kyrol Internet Security 9.0.6.9, which stems from the fact that the use of 0x9C402405 with METHODNEITHER results in the reading of the original...

CVE-2019-19820

An invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution via usermode because 0x9C402405 using METHODNEITHER results in a read primitive...

CVE-2019-19820

CVE-2019-19820 affects Kyrol Internet Security 9.0.6.9, via an invalid pointer in IOCTL handling of kyrld.sys. Using 0x9C402405 with METHOD_NEITHER yields a read primitive, enabling local privilege escalation, denial of service, and potentially code execution from user mode. The connected documen...

CVE-2019-19820: Release of Invalid Pointer or Reference

An invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution via usermode because 0x9C402405 using METHODNEITHER results in a read primitive...

CVE-2019-10520

An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory in Snapdragon Mobile, Snapdragon Voice & Music in QCS405, SD 210/SD 212/SD 205, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / ...

CVE-2019-3951: Stack-based Buffer Overflow

Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service memory corruption due to a stack-based buffer overflow when handling IOCTL 70533 RPC messages...

CVE-2019-10520: Missing Release of Resource after Effective Lifetime

An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory in Snapdragon Mobile, Snapdragon Voice & Music in QCS405, SD 210/SD 212/SD 205, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / ...

Lenovo Power Management Driver 1.67.17.48 - pmdrvs.sys Denial of Service (PoC)

Lenovo Power Management Driver 1.67.17.48 - pmdrvs.sys Denial of Service PoC Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service PoC Date: 2019-12-11 Exploit Author: Nassim Asrir CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor :...

PT-2019-11911

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Mobile, Snapdragon Voice & Music versions affected versions not specified Description The issue allows an unprivileged application to allocate GPU memory by calling a memory allocation ioctl function, potentially exhausting...

PT-2019-16801

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.4.3 Description The issue allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service due to a stack-based buffer overflow when handling IOCTL 70533 RPC messages...

Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service (PoC)

Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service PoC Date: 2019-12-11 Exploit Author: Nassim Asrir CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor : https://www.lenovo.com/us/en/ Ref :...