CVE-2018-3990

An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400). A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation. An attacker can send an IRP request to trigger this vulnerability.

• CWE-119

• http://www.securityfocus.com/bid/107005Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0658Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/107005Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0658Exploit, Third Party Advisory

Published

Feb 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3984An exploitable uninitialized length vulnerability exists wit…7.8
• CVE-2018-3985An exploitable double free vulnerability exists in the mdnsc…9.8
• CVE-2018-3986An exploitable information disclosure vulnerability exists i…5.5
• CVE-2018-3987An exploitable information disclosure vulnerability exists i…5.5
• CVE-2018-3988Signal Messenger for Android 4.24.8 may expose private infor…4.7
• CVE-2018-3989An exploitable kernel memory disclosure vulnerability exists…4.3
• CVE-2018-3991An exploitable heap overflow vulnerability exists in the Wkb…10
• CVE-2018-3992An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3993An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3994An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3995An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3996An exploitable use-after-free vulnerability exists in the Ja…8.8