This vulnerability involves a heap-based buffer overflow in the Moore Threads MTT S80 Driver Package up to version 340.150. Specifically, the issue is in the function sub_140001000 of the mtdispkm64.sys library's IOCTL Handler component. The flaw allows local attackers to manipulate inputs to cause a heap overflow, potentially leading to code execution or system compromise. The vendor was contacted but did not provide any response or patch information. The CVSS 4.0 score is 9.3, indicating a critical severity with local attack vector, low attack complexity, no privileges required beyond local, and no user interaction needed.

Successful exploitation of this heap-based buffer overflow can lead to arbitrary code execution or system compromise on affected systems. Because the attack requires local access, remote exploitation is not possible. The high CVSS score reflects the potential for significant impact on confidentiality, integrity, and availability if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are available, users should restrict local access to trusted users only and monitor for any updates from the vendor regarding fixes. Avoid running untrusted code locally on affected systems until a patch is available.