Bigcat

**Name of the Vulnerable Software and Affected Versions** ColorFul iGameCenter version 1.0.3.4 **Description** A weakness exists in the IOCTL Handler component within the `ene.sys` library. Specifically, the `sub 140001AF0()` function is susceptible to untrusted pointer dereference, which occurs when a program uses a pointer without verifying that it points to a valid memory location. This issue can only be exploited by a local attacker. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BioStar VALKYRIE AURORA version 2.10.2411.0800 **Description** A write-what-where condition exists in the IOCTL Handler component within the file BS RVSIO64.sys. This issue occurs when the `PhysicalAddress` argument is manipulated in the `sub 1105C()` function. A write-what-where condition is a memory corruption flaw that allows an attacker to write arbitrary data to an arbitrary memory address. Exploitation requires local access to the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BioStar Temperature Monitor Utility version 1.2.1806.2200 **Description** A write-what-where condition exists in the IOCTL Handler component within the file BS HWMIO64 W10.sys. This issue occurs in the `sub 1105C()` function when the `PhysicalAddress` argument is manipulated. Exploitation requires local access to the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BioStar BIOS Update Utility version 1.9.7.3 **Description** A write-what-where condition exists in the IOCTL Handler component within the `sub 110BC()` function of the `BSMEM64 W10.sys` file. This issue occurs when the `PhysicalAddress` and `Size` arguments are manipulated, allowing a local attacker to perform unauthorized memory writes. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BioStar VIVID LED DJ version 4.0.2411.1500 **Description** A write-what-where condition exists in the IOCTL Handler component within the `BS LED64.sys` file. This issue occurs in the `sub 1105C()` function when the `AssociatedIrp` argument is manipulated. A write-what-where condition is a memory corruption flaw that allows an attacker to write arbitrary data to an arbitrary memory address. Local access is required to exploit this flaw. **Recommendations** As a temporary workaround, restrict local access to the system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Chengdu Qilu Technology Ludashi version 6.1026.4715.714 **Description** A flaw exists in the `sub 11008` function within the `ComputerZ x64.sys` library. A local attacker can manipulate the `PhysicalAddress` argument to cause information disclosure. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `ComputerZ x64.sys` library to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Chengdu Qilu Technology Ludashi version 6.1026.4715.714 **Description** A security flaw exists in the Message Dispatch Handler component within the `ProtectFilter64.sys` library. The issue resides in the `MessageNotifyCallback()` function, where a manipulation can lead to missing authorization. Exploitation requires local access to the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IOBit Uninstaller version 15.5.0.11 **Description** A flaw exists in the IOCTL Dispatch Handler component within the `IURegistryFilter.sys` file. Specifically, the `sub 11838()` function is susceptible to a null pointer dereference, which occurs when the system attempts to read or write to a memory address that is null. This issue requires local access to be exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.