Bigcat

A weakness exists in the IOCTL Handler component within the `ene.sys` library. Specifically, the `sub 140001AF0()` function is susceptible to untrusted pointer dereference, which occurs when a program uses a pointer without verifying that it points to a valid memory location. This issue can only be exploited by a local attacker.

A write-what-where condition exists in the IOCTL Handler component within the file BS RVSIO64.sys. This issue occurs when the `PhysicalAddress` argument is manipulated in the `sub 1105C()` function. A write-what-where condition is a memory corruption flaw that allows an attacker to write arbitrary data to an arbitrary memory address. Exploitation requires local access to the system.

A write-what-where condition exists in the IOCTL Handler component within the file BS HWMIO64 W10.sys. This issue occurs in the `sub 1105C()` function when the `PhysicalAddress` argument is manipulated. Exploitation requires local access to the system.

A write-what-where condition exists in the IOCTL Handler component within the `sub 110BC()` function of the `BSMEM64 W10.sys` file. This issue occurs when the `PhysicalAddress` and `Size` arguments are manipulated, allowing a local attacker to perform unauthorized memory writes.

A write-what-where condition exists in the IOCTL Handler component within the `BS LED64.sys` file. This issue occurs in the `sub 1105C()` function when the `AssociatedIrp` argument is manipulated. A write-what-where condition is a memory corruption flaw that allows an attacker to write arbitrary data to an arbitrary memory address. Local access is required to exploit this flaw.

A flaw exists in the `sub 11008` function within the `ComputerZ x64.sys` library. A local attacker can manipulate the `PhysicalAddress` argument to cause information disclosure.

A security flaw exists in the Message Dispatch Handler component within the `ProtectFilter64.sys` library. The issue resides in the `MessageNotifyCallback()` function, where a manipulation can lead to missing authorization. Exploitation requires local access to the system.

A flaw exists in the IOCTL Dispatch Handler component within the `IURegistryFilter.sys` file. Specifically, the `sub 11838()` function is susceptible to a null pointer dereference, which occurs when the system attempts to read or write to a memory address that is null. This issue requires local access to be exploited.