CWE Code: 476
Vulnerability Type: privilege_escalation
CVSS Score: 4.9
CWE Name:  NULL Pointer Dereference
Summary: hwinfo amd64 kernel driver version 8.98 and lower allows an unprivileged user to send an ioctl to the device driver. if input and/or output buffer pointers are null or if these buffers' data are invalid, a null/invalid pointer access occurs, resulting in a windows kernel panic aka blue screen. this affects ioctls higher than 0x85fe2600 with the hwinfo32 symbolic device name.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/NONE/COMPLETE
Published Date: 2018-05-10
Last Modified Date: 2018-06-13