CVE-2026-56129

Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A logged-in user with no administrative privilege may access physical memory.

Score

CVSS 4.0 6.8 Medium

Status

Deferred - vultures@jpcert.or.jp

Published

2026-06-25

Last modified

2026-06-25

Weaknesses

CWE-782

Affected products

• Generic Io Memory Access Driver (Dynabook Inc.)
• Generic Io Memory Access Driver (Toshiba Corporation)

References

• https://corporate.jp.sharp/info/product-security/advisory-list/2026-003/
• https://global.sharp/corporate/info/product-security/advisory-list/2026-003/
• https://jvn.jp/en/vu/JVNVU91051826/