CVE-2018-19650

Local attackers can trigger a stack-based buffer overflow on vulnerable installations of Antiy-AVL ATool security management v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002000 by the IRPFile.sys Antiy-AVL ATool kernel driver. The bug is caused by failure to properly validate the length of the user-supplied data, which results in a kernel stack buffer overflow. An attacker can leverage this vulnerability to execute arbitrary code in the context of the kernel, which could lead to privilege escalation and a failed exploit could lead to denial of service.

• CWE-787

• http://packetstormsecurity.com/files/150549/ATool-1.0.0.22-Stack-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/150549/ATool-1.0.0.22-Stack-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry

Published

Dec 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19643Information leakage issue in Micro Focus Solutions Business …4.7
• CVE-2018-19644Reflected cross site script issue in Micro Focus Solutions B…5
• CVE-2018-19645An Authentication Bypass issue exists in Solutions Business …
• CVE-2018-19646The Python CGI scripts in PWS in Imperva SecureSphere 13.0.1…
• CVE-2018-19648An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1…
• CVE-2018-19649XSS exists in InfoVista VistaPortal SE Version 5.1 (build 51…
• CVE-2018-19651admin/functions/remote.php in Interspire Email Marketer thro…
• CVE-2018-19653HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent…
• CVE-2018-19654An issue was discovered in Sales & Company Management System…7.5
• CVE-2018-19655A stack-based buffer overflow in the find_green() function o…
• CVE-2018-19658The Markdown editor in YXBJ before 8.3.2 on macOS has stored…5.4
• CVE-2018-19659An exploitable authenticated command-injection vulnerability…