The vulnerability in BioStar BIOS Update Utility 1.9.7.3 is due to a write-what-where condition caused by manipulation of PhysicalAddress and Size parameters in the IOCTL handler function sub_110BC of the BSMEM64_W10.sys driver. This flaw allows an attacker with local access and low privileges to write arbitrary data to arbitrary memory locations, potentially leading to privilege escalation or system compromise. The exploit has been publicly disclosed, but the vendor has not issued any fix or advisory.

An attacker with local access and low privileges can exploit this vulnerability to perform arbitrary memory writes, which may lead to privilege escalation or system compromise. The high CVSS score (9.3) reflects the critical nature of this flaw. No known exploits are reported in the wild yet, but public exploit code is available.

No official patch or remediation is currently available from the vendor. Users should avoid running the vulnerable version 1.9.7.3 of the BioStar BIOS Update Utility and restrict local access to trusted users only until a fix is released. Monitor vendor channels for updates.