Local Privilege Escalation in Colorful iGameCenter

CVE-2026-109520 identifies a critical security vulnerability within Colorful iGameCenter version 2.0.0.82. The flaw resides in the handling of the SystemBuffer argument within the MmMapIoSpace function, which is utilized by the AMDRyzenMasterDriver.sys component. This driver is typically used for low-level hardware interaction and overclocking management. An attacker with local access to the system can exploit this weakness by sending specially crafted IOCTL (Input/Output Control) requests to the driver. Successful exploitation allows a local user to perform unauthorized actions with elevated privileges, potentially leading to full system compromise or persistence. The vendor has not provided a response or a patch to address this disclosure, leaving users of this software version exposed to potential privilege escalation.

Impact

Successful exploitation of this vulnerability allows an attacker who already has low-privileged local access to escalate their permissions to a higher level, potentially that of the kernel or system user. This level of access grants the attacker the ability to bypass security controls, modify system files, install rootkits, or exfiltrate sensitive data. Since the software is primarily used for hardware control, the scope of impact is local to the affected machine, but the severity is high due to the potential for total control over the host operating system.

Recommendation

• Monitor for the presence of the vulnerable driver file 'AMDRyzenMasterDriver.sys' associated with Colorful iGameCenter 2.0.0.82 in the environment.
• Given the lack of a vendor patch, evaluate the necessity of the iGameCenter software on systems and consider removal or isolation for high-risk assets until a security update is released.
• Restrict local user access to hardware management utilities and drivers to prevent non-administrative users from interacting with high-privileged IOCTL interfaces.