This vulnerability in ColorFul iGameCenter 1.0.3.4 arises from an untrusted pointer dereference in the IOCTL Handler component within the ene.sys library, specifically in function sub_140001AF0. The flaw allows a local attacker with limited privileges to execute an attack without user interaction. Exploit code is publicly available, increasing the risk of exploitation. The vendor was notified but has not issued any response or patch.

Successful exploitation can lead to severe consequences as indicated by the CVSS 4.0 score of 9.3, which includes high impact on confidentiality, integrity, availability, and security controls. The attack requires local access and low privileges but does not require user interaction. The presence of public exploit code increases the risk of exploitation, potentially allowing attackers to compromise system stability or security.

No official patch or remediation is currently available from the vendor, as they have not responded to the disclosure. Users should restrict local access to trusted personnel only and monitor for any suspicious activity related to the vulnerable component. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance if it becomes available.