CVE-2018-3971

An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data under controlled by an attacker address, resulting in memory corruption. An attacker can send IRP request to trigger this vulnerability.

• CWE-123

• http://www.securityfocus.com/bid/105743Broken Link, Third Party Advisory, VDB Entry
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0636Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/105743Broken Link, Third Party Advisory, VDB Entry
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0636Exploit, Third Party Advisory

Published

Oct 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3965An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3966An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3967An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3968An exploitable vulnerability exists in the verified boot pro…7
• CVE-2018-3969An exploitable vulnerability exists in the verified boot pro…7.8
• CVE-2018-3970An exploitable memory disclosure vulnerability exists in the…5.5
• CVE-2018-3972An exploitable code execution vulnerability exists in the Le…9.8
• CVE-2018-3973An exploitable out of bounds write exists in the CAL parsing…7.8
• CVE-2018-3974An exploitable local privilege elevation vulnerability exist…7.8
• CVE-2018-3975An exploitable uninitialized variable vulnerability exists i…7.5
• CVE-2018-3976An exploitable out-of-bounds write exists in the CALS Raster…7.8
• CVE-2018-3977An exploitable code execution vulnerability exists in the XC…8.8