CVE Catalog
CVE-2025-47406
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.12%
1th percentile - higher than 1% of all known CVEs
Summary
Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
Risk Assessment
Risk of disclosing sensitive information, potentially exposing system or user data to unauthorized access.
Recommendation
Apply vendor patches and strengthen buffer size validation in IOCTL handling.
Other vulnerabilities in IOCTL
Original NVD description (English source)
Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS