CWE-781 Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code

variant

The product defines an IOCTL that uses METHOD_NEITHER for I/O, but it does not validate or incorrectly validates the addresses that are provided.

parent weaknesses

Broader classes this is a kind of.

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.