This vulnerability affects Almico Speedfan 4.52, specifically the KiSystemCall64 function in the speedfan.sys driver related to the MSR Index Handler. A local attacker with high privileges can manipulate this function to cause a memory leak. The vulnerability does not require user interaction and has a CVSS 4.0 base score of 4.6, indicating medium severity. The vendor has not responded to disclosure requests, and no official patch or remediation is currently available. Exploit code has been publicly released, but there are no known reports of exploitation in the wild.

The memory leak could lead to resource exhaustion on the affected system, potentially degrading system performance or causing instability. Since exploitation requires local high-privilege access, the impact is limited to scenarios where an attacker already has significant system access. There is no indication of remote exploitation or privilege escalation from this vulnerability alone.

No official patch or remediation is currently available from the vendor. Users should limit local access to trusted users only and monitor for unusual resource usage. Since the vendor did not respond to disclosure, check for any future advisories or updates from Almico. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.