Common Weakness Enumeration

    CWE Definition / CWE-781

    CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code

    The product defines an IOCTL that uses METHOD_NEITHER for I/O, but it does not validate or incorrectly validates the addresses that are provided.

    Published:15 Jul 2009
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input

    CWE-822: Untrusted Pointer Dereference