Vulnerability in Colorful Igamecenter
CVE-2026-94403
A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Colorful Igamecenter — versions 1.0.3.4
Weakness classification (CWE)
References
- cna@vuldb.com (technical-description, vdb-entry)
- cna@vuldb.com (signature, permissions-required)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (third-party-advisory)
Frequently asked questions
- What is CVE-2026-94403?
- CVE-2026-94403 is a high-severity vulnerability in Colorful Igamecenter, classified under Untrusted Pointer Dereference. CVSS score: 8.8/10. Published 2026-09-21.
- How severe is CVE-2026-94403?
- High severity. CVSS v3 base score is 8.8 out of 10.