CVE-2026-109520: Privilege Defined With Unsafe Actions in Colorful iGameCenter

This vulnerability affects Colorful iGameCenter 2.0.0.82 specifically in the MmMapIoSpace function of the AMDRyzenMasterDriver.sys library's Dispatch Handler. The issue arises from unsafe manipulation of the SystemBuffer argument, which results in privilege escalation when exploited locally. The attack requires local access and does not require user interaction. The vendor was contacted but did not provide any response or patch information. The CVSS 4.0 score is 9.3, indicating a critical severity level.

Successful exploitation of this vulnerability allows a local attacker with limited privileges to escalate their privileges on the affected system. This could lead to unauthorized access to sensitive system resources or administrative control. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are available, users should monitor official channels for updates. Until a fix is available, restrict local access to trusted users only.