{"id":"CVE-2026-94424","published":"2026-09-21T21:17:21.793","lastModified":"2026-09-21T21:17:21.793","description":"A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-119","CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://vuldb.com/cve/CVE-2026-94424","tags":[]},{"url":"https://vuldb.com/submit/894806","tags":[]},{"url":"https://vuldb.com/vuln/408150","tags":[]},{"url":"https://vuldb.com/vuln/408150/cti","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The vulnerability allows heap-based buffer overflow in the Moore Threads MTT S80 Driver Package up to version 340.150 due to improper handling of user input. This can lead to remote code execution if exploited.","exploitability":"Exploitation requires local access and manipulation of specific driver functions, making it moderately difficult but feasible for attackers with appropriate privileges.","blast_radius":"If exploited, the vulnerability could result in complete control over affected systems, potentially leading to data theft or system compromise.","remediation":"Update to the latest version of the Moore Threads MTT S80 Driver Package immediately to mitigate this risk.","tags":["buffer-overflow","local-exploit","driver-vuln","heap-overflow","critical"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-22T06:06:17.717Z"}}