VYPR

Tdelo64.sys

by Pegatron

CVEs (2)

  • CVE-2026-14961MedJul 15, 2026
    risk 0.00cvss 6.2epss 0.00

    Pegatron `Tdelo64.sys` exposes a privileged device interface, `\\.\TdeIo`, that fails to properly restrict access to sensitive IOCTL functionality. The driver's IOCTL dispatcher does not validate caller privileges or verify user-supplied kernel memory addresses before performing…

  • CVE-2026-14960CriJul 15, 2026
    risk 0.00cvss 9.8epss 0.00

    Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\TdeIo` device interface. IOCTL handlers including `TDE_IOCTL_INDEXIO_READ` and `TDE_IOCTL_INDEXIO_WRITE` permit unprivileged user-mode callers to perform arbitrary hardware I/O…