CVE-2026-94128

Name of the Vulnerable Software and Affected Versions BioStar VIVID LED DJ version 4.0.2411.1500

Description A write-what-where condition exists in the IOCTL Handler component within the BS LED64.sys file. This issue occurs in the sub 1105C() function when the AssociatedIrp argument is manipulated. A write-what-where condition is a memory corruption flaw that allows an attacker to write arbitrary data to an arbitrary memory address. Local access is required to exploit this flaw.

Recommendations As a temporary workaround, restrict local access to the system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.