CVE-2024-36056: Marvin Test Hw Driver

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory via IOCTL 0x9c406490 (for IoAllocateMdl, MmBuildMdlForNonPagedPool, and MmMapLockedPages), leading to NT AUTHORITY\SYSTEM privilege escalation.

Affected products

• Marvin Test Hw Driver: from 1.0, up to and including 5.0.4.0

Published 2024-05-26. Last modified 2026-06-17.