CVE-2018-10828

MEDIUM

Alps Pointing-device Driver 10.1.101.207 - Denial of Service via ApMsgFwd File Mapping Object

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-10828. PoCs published by Souhail Hammou.

AI-analyzed exploit summary This exploit triggers a denial of service in ApMsgFwd.exe by writing invalid pointers to a shared memory section, causing an access violation in MultiByteToWideChar. It leverages improper input validation in the Alps Pointing-device Driver.

Description

An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the "ApMsgFwd File Mapping Object" section. ApMsgFwd.exe uses the data written to this section as arguments to functions. This causes a denial of service condition when invalid pointers are written to the mapped section. This driver has been used with Dell, ThinkPad, and VAIO devices.

Exploits (1)

exploitdb WORKING POC
by Souhail Hammou · cdoswindows
https://www.exploit-db.com/exploits/44610

This exploit triggers a denial of service in ApMsgFwd.exe by writing invalid pointers to a shared memory section, causing an access violation in MultiByteToWideChar. It leverages improper input validation in the Alps Pointing-device Driver.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Alps Pointing-device Driver 10.1.101.207 (ApMsgFwd.exe)
No auth needed
Prerequisites: ApMsgFwd.exe running with vulnerable driver version · Local access to the system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/44610/
Various Sources x_refsource_confirm
http://support.lenovo.com/us/en/solutions/LEN-25654

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 44.7%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (1)
alps/pointing-device_driver 10.1.101.207
Published May 09, 2018
Tracked Since Feb 18, 2026