CVE-2018-10828

An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the "ApMsgFwd File Mapping Object" section. ApMsgFwd.exe uses the data written to this section as arguments to functions. This causes a denial of service condition when invalid pointers are written to the mapped section. This driver has been used with Dell, ThinkPad, and VAIO devices.

• CWE-20

• http://support.lenovo.com/us/en/solutions/LEN-25654
• https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-10828/apmsgfwd_exploit_dos.cThird Party Advisory
• https://www.exploit-db.com/exploits/44610/Third Party Advisory, VDB Entry
• http://support.lenovo.com/us/en/solutions/LEN-25654
• https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-10828/apmsgfwd_exploit_dos.cThird Party Advisory
• https://www.exploit-db.com/exploits/44610/Third Party Advisory, VDB Entry

Published

May 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10821Cross-site scripting (XSS) vulnerability in backend/pages/mo…4.8
• CVE-2018-10822Directory traversal vulnerability in the web interface on D-…7.5
• CVE-2018-10823An issue was discovered on D-Link DWR-116 through 1.06, DWR-…8.8
• CVE-2018-10824An issue was discovered on D-Link DWR-116 through 1.06, DIR-…9.8
• CVE-2018-10825Mimo Baby 2 devices do not use authentication or encryption …
• CVE-2018-10827LiteCart before 2.1.2 allows remote attackers to cause a den…
• CVE-2018-1083Zsh before version 5.4.2-test-1 is vulnerable to a buffer ov…
• CVE-2018-10830In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sy…
• CVE-2018-10831Z-NOMP before 2018-04-05 has an incorrect Equihash solution …
• CVE-2018-10832ModbusPal 1.6b is vulnerable to an XML External Entity (XXE)…
• CVE-2018-10839Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation s…6.5
• CVE-2018-1084corosync before version 2.4.4 is vulnerable to an integer ov…7.5