CVE-2026-82908: Integer Overflow in MSI Dragon Center

This vulnerability involves an integer overflow in the MmioWritePath function within the NTIOLib_X64.sys driver of MSI Dragon Center up to version 2.0.155.0. By manipulating the argument count or element size parameters, an attacker with local privileges can trigger an integer overflow condition. The vulnerability has a CVSS 4.0 base score of 9.3, indicating critical severity with high impact on confidentiality, integrity, and availability. Although an exploit is publicly available, the vendor has not issued any advisory or patch, and remediation status is unknown.

Successful exploitation can lead to severe consequences including potential privilege escalation or system compromise due to the integer overflow in a kernel-mode driver component. The vulnerability impacts confidentiality, integrity, and availability at a high level. However, exploitation requires local access, limiting remote attack vectors.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should restrict local access to trusted users only and monitor for suspicious activity related to MSI Dragon Center. Avoid running untrusted code locally until a patch is available.