CWE-781
Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code
The product defines an IOCTL that uses METHOD_NEITHER for I/O, but it does not validate or incorrectly validates the addresses that are provided.
Impactr finds and proves whether CWE-781 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.