CVE-2026-82908 PUBLISHED

MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow

Assigner: VulDB
Reserved: 31.08.2026 Published: 31.08.2026 Updated: 01.09.2026

A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLib_X64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack requires a local approach. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
CVSS Score: 9.3

Product Status

Vendor MSI
Product Dragon Center
Versions
  • Version 2.0.155 is affected

Credits

  • chanhokim (VulDB User) reporter
  • VulDB CNA Team coordinator

References

Problem Types

  • Integer Overflow CWE
  • Numeric Error CWE