Wacom
Monthly
An out-of-bounds read in the Linux kernel's Wacom Bluetooth HID driver (wacom_intuos_pro2_bt_irq) allows an attacker in Bluetooth range who controls, spoofs, or merely operates a malfunctioning paired peripheral advertising a Wacom Intuos Pro/Intuos BT VID/PID to make the kernel parse a report shorter than the branch's fixed offsets, reading past the end of the received buffer. Because the driver force-registers pen, pad and touch input nodes for the matched device type via wacom_setup_device_quirks(), the leaked bytes are forwarded to userspace through evdev (MSC_SERIAL, ABS_MISC, ABS_WHEEL), giving a concrete confidentiality channel in addition to the immediate availability impact of a kernel OOB access on short descriptors. The reported CVSS is 8.1 (AV:A/AC:L/PR:N/UI:N), while our independent assessment rates it CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H - still adjacent and unauthenticated from a credential standpoint, but requiring the victim to pair/trust the hostile peripheral and, for any real confidentiality payoff, a local process consuming the evdev stream. No public exploit code was identified at time of analysis and there is no confirmed active exploitation (not CISA KEV); vendor patches are available in current stable trees.
Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Wacom Tablet Driver installer prior to 6.4.2-1 (for macOS) contains an improper link resolution before file access vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the start/stopLaunchDProcess command. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the startProcess command. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
An out-of-bounds read in the Linux kernel's Wacom Bluetooth HID driver (wacom_intuos_pro2_bt_irq) allows an attacker in Bluetooth range who controls, spoofs, or merely operates a malfunctioning paired peripheral advertising a Wacom Intuos Pro/Intuos BT VID/PID to make the kernel parse a report shorter than the branch's fixed offsets, reading past the end of the received buffer. Because the driver force-registers pen, pad and touch input nodes for the matched device type via wacom_setup_device_quirks(), the leaked bytes are forwarded to userspace through evdev (MSC_SERIAL, ABS_MISC, ABS_WHEEL), giving a concrete confidentiality channel in addition to the immediate availability impact of a kernel OOB access on short descriptors. The reported CVSS is 8.1 (AV:A/AC:L/PR:N/UI:N), while our independent assessment rates it CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H - still adjacent and unauthenticated from a credential standpoint, but requiring the victim to pair/trust the hostile peripheral and, for any real confidentiality payoff, a local process consuming the evdev stream. No public exploit code was identified at time of analysis and there is no confirmed active exploitation (not CISA KEV); vendor patches are available in current stable trees.
Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Wacom Tablet Driver installer prior to 6.4.2-1 (for macOS) contains an improper link resolution before file access vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the start/stopLaunchDProcess command. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the startProcess command. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.