Insufficient incoming data validation for \Device\SandBox device driver and SSDT hoocked functions.
vulners.com/securityvulns/securityvulns:doc:14894
vulners.com/securityvulns/securityvulns:doc:15086