PT-2026-96034

CVE-2026-94129

·

Published

2026-09-21

·

Updated

2026-10-19

Description by

CVSS 3.1
8.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions BioStar VALKYRIE AURORA version 2.10.2411.0800
Description A write-what-where condition exists in the IOCTL Handler component within the file BS RVSIO64.sys. This issue occurs when the PhysicalAddress argument is manipulated in the sub 1105C() function. A write-what-where condition is a memory corruption flaw that allows an attacker to write arbitrary data to an arbitrary memory address. Exploitation requires local access to the system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾