CVE-2018-3970

An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.

• CWE-908

• http://www.securityfocus.com/bid/105743Broken Link, Third Party Advisory, VDB Entry
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0635Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/105743Broken Link, Third Party Advisory, VDB Entry
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0635Exploit, Third Party Advisory

Published

Oct 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3964An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3965An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3966An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3967An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3968An exploitable vulnerability exists in the verified boot pro…7
• CVE-2018-3969An exploitable vulnerability exists in the verified boot pro…7.8
• CVE-2018-3971An exploitable arbitrary write vulnerability exists in the 0…7.8
• CVE-2018-3972An exploitable code execution vulnerability exists in the Le…9.8
• CVE-2018-3973An exploitable out of bounds write exists in the CAL parsing…7.8
• CVE-2018-3974An exploitable local privilege elevation vulnerability exist…7.8
• CVE-2018-3975An exploitable uninitialized variable vulnerability exists i…7.5
• CVE-2018-3976An exploitable out-of-bounds write exists in the CALS Raster…7.8