CVE-2026-56129

MEDIUM

Dynabook Inc. Generic IO & Memory Access Driver - Exposed IOCTL with Insufficient Access Control

Title source: rule

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-56129. PoCs published by valium007.

AI-analyzed exploit summary This PoC exploits a vulnerable Toshiba qiomem.sys driver (CVE-2026-56129) to achieve arbitrary physical memory read/write capabilities from user mode, limited to 32-bit physical addresses. The exploit creates a fake ACPI device to load the driver and uses IOCTLs to interact with the driver for physical memory manipulation.

Description

Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A logged-in user with no administrative privilege may access physical memory.

Exploits (1)

nomisec WORKING POC

by valium007 · poc

https://github.com/valium007/qiomem

View Code ZIP pw:eip

This PoC exploits a vulnerable Toshiba qiomem.sys driver (CVE-2026-56129) to achieve arbitrary physical memory read/write capabilities from user mode, limited to 32-bit physical addresses. The exploit creates a fake ACPI device to load the driver and uses IOCTLs to interact with the driver for physical memory manipulation.

Classification

Working Poc 98%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: Toshiba qiomem.sys driver (version distributed via Microsoft Update Catalog, update ID b2b6cde4-486b-4665-9093-19bf582b86fd)

No auth needed

Prerequisites: Vulnerable Toshiba qiomem.sys driver installed on the target system · User-mode execution privileges · Ability to load drivers via fake device creation

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1548 - Abuse Elevation Control Mechanism

mistral-large-3 · analyzed Jul 10, 2026 Full analysis →

References (3)

Core 3

Core References

https://global.sharp/corporate/info/product-security/advisory-list/2026-003/

https://corporate.jp.sharp/info/product-security/advisory-list/2026-003/

https://jvn.jp/en/vu/JVNVU91051826/

Scores

CVSS v3 5.5

EPSS 0.0012

EPSS Percentile 2.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-782

Status published

Products (2)

Dynabook Inc./Generic IO & Memory Access driver all versions

TOSHIBA CORPORATION/Generic IO & Memory Access driver all versions

Published Jun 25, 2026

Tracked Since Jun 25, 2026