Vulnerability · Published Sep 21, 2026 · Assigned by VulDB

CVE-2026-94424Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow

High 8.8

In plain English

A high-severity heap buffer overflow in MTT S80 Driver Package from Moore Threads. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.2%top 90.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Moore Threads	MTT S80 Driver Package	340.150

Weakness: CWE-122, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R

References

VDB-408150 | Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow vdb-entry, technical-description
VDB-408150 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-94424 | CVE Analysis and Report third-party-advisory
Submit #894806 | MOORE THREADS MTT S80 driver package v340.150 Buffer Overflow third-party-advisory