CVE-2023-2570

HIGH Year: 2023
CVSS v3 Score
7.8
High
Weakness Type
CWE-129
View all →

Vulnerability Description

A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an unpredictable index to an IOCTL call in the Foxboro.sys driver.

Related Vulnerabilities

CVE-2014-9948

HIGH
CVSS:7.8(High)

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially exist.

CWE-1292014

CVE-2016-8815

HIGH
CVSS:7.8(High)

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a value passed from a user to the driver is used withou...

CWE-1292016

CVE-2016-8816

HIGH
CVSS:7.8(High)

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a value passed from a user to the driver is used withou...

CWE-1292016

CVE-2017-0322

HIGH
CVSS:7.8(High)

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a value passed from a user to the driver is not correctly validated and ...

CWE-1292017

CVE-2017-0345

HIGH
CVSS:7.8(High)

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provided input used as an array size is not co...

CWE-1292017

CVE-2017-0347

HIGH
CVSS:7.8(High)

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not co...

CWE-1292017