Vulnerability · Published Oct 13, 2026 · Assigned by VulDB
CVE-2026-109520Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions
High 8.8
In plain English
A high-severity security flaw in iGameCenter from Colorful. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Official description
A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack needs to be launched locally. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Colorful | iGameCenter | 2.0.0.82 |
Weakness: CWE-267, CWE-266 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R
References
- VDB-417176 | Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions vdb-entry, technical-description
- VDB-417176 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-109520 | CVE Analysis and Report third-party-advisory
- Submit #984282 | Colorful (七彩虹) iGameCenter 2.0.0.82 Incorrect Privilege Assignment third-party-advisory