Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-56129 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A logged-in user with no administrative privilege may access physical memory.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CNA: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://corporate.jp.sharp/info/product-security/advisory-list/2026-003/	[email protected]	AdvisoryRemedyVendor
https://global.sharp/corporate/info/product-security/advisory-list/2026-003/	[email protected]	AdvisoryRemedyVendor
https://jvn.jp/en/vu/JVNVU91051826/	[email protected]	AdvisoryRemedy

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-782	Exposed IOCTL with Insufficient Access Control	[email protected]

Affected Products

Product	Versions
Toshiba Generic IO & Memory Access	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation Workaround:low effort Uninstall the affected Generic IO & Memory Access driver. After uninstalling, you will no longer be able to configure the password using the Password Utility. To set a password, configure the BIOS password from "Security" in the BIOS Setup Utility. For instructions on how to start the BIOS Setup Utility, refer to the following links: - [How to start the BIOS Setup Utility / Restore default settings](https://dynabook.com/assistpc/faq/pcdata2/017652.htm) - [How to start the BIOS Setup Utility / Restore default settings (Notebook PC)](https://dynabook.com/assistpc/faq/pcdata2/013867.htm)
Dynabook Generic IO & Memory Access	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation Workaround:low effort Uninstall the affected Generic IO & Memory Access driver. After uninstalling, you will no longer be able to configure the password using the Password Utility. To set a password, configure the BIOS password from "Security" in the BIOS Setup Utility. For instructions on how to start the BIOS Setup Utility, refer to the following links: - [How to start the BIOS Setup Utility / Restore default settings](https://dynabook.com/assistpc/faq/pcdata2/017652.htm) - [How to start the BIOS Setup Utility / Restore default settings (Notebook PC)](https://dynabook.com/assistpc/faq/pcdata2/013867.htm)

Change History

2 change records found show changes

Date	Action	Recorded By
Jun 25, 2026	CVE Modified	CISA-ADP
Jun 25, 2026	New CVE Received	[email protected]