CVE-2018-8061

7.1 highEPSS 0.4%

HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send IOCTL 0x85FE2608 to the device driver with the HWiNFO32 symbolic device name, resulting in direct physical memory read or write.

Severity

CVSS 3.0

7.1 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2018-05-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hwinfo:amd64_kernel_driver

References

https://github.com/otavioarj/SIOCtl
https://github.com/otavioarj/SIOCtl

Check your stack JSON