CVE-2026-94424

8.8 HIGH

Published 2026-09-21 · Updated 2026-09-21

AI risk analysis

Summary: The vulnerability allows heap-based buffer overflow in the Moore Threads MTT S80 Driver Package up to version 340.150 due to improper handling of user input. This can lead to remote code execution if exploited.
Exploitability: Exploitation requires local access and manipulation of specific driver functions, making it moderately difficult but feasible for attackers with appropriate privileges.
Blast radius: If exploited, the vulnerability could result in complete control over affected systems, potentially leading to data theft or system compromise.
Prioritized remediation: Update to the latest version of the Moore Threads MTT S80 Driver Package immediately to mitigate this risk.

buffer-overflowlocal-exploitdriver-vulnheap-overflowcritical

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-119, CWE-122

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.