CVE-2018-8061

HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send IOCTL 0x85FE2608 to the device driver with the HWiNFO32 symbolic device name, resulting in direct physical memory read or write.

Score

CVSS 3.0 7.1 High

Status

Modified - cve@mitre.org

Published

2018-05-10

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Amd64 Kernel Driver (Hwinfo)

References

• https://github.com/otavioarj/SIOCtl