This vulnerability in BioStar Temperature Monitor Utility 1.2.1806.2200 involves a write-what-where condition caused by manipulation of the PhysicalAddress argument in the IOCTL Handler function sub_1105C of the BS_HWMIO64_W10.sys driver. The flaw allows an attacker with local access to perform arbitrary memory writes, potentially compromising system integrity. The vendor was notified but has not provided any response or fix. The vulnerability has a CVSS 4.0 score of 9.3, indicating critical severity. Exploit code has been publicly disclosed, though no confirmed in-the-wild exploitation is reported.

Successful exploitation allows a local attacker to perform arbitrary memory writes, which can lead to system compromise, privilege escalation, or denial of service. Given the critical CVSS score and the nature of the vulnerability, the impact on affected systems is severe.

No official fix or patch is currently available from the vendor. Users should restrict local access to trusted personnel only and monitor for any suspicious activity. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.