CVE-2026-82908: MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLibX64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack requires a local approach. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Systems running MSI Dragon Center version 2.0.155.0 or earlier are affected. Exploitation requires local access and privileges sufficient to interact with the vulnerable driver path.
What does an attacker need to do to trigger the issue?
An attacker must locally manipulate the count and elementSize arguments supplied to the MmioWritePath function in NTIOLib_X64.sys, causing an integer overflow. No user interaction is indicated.
Is public exploit code available?
Yes. The vulnerability information states that an exploit has been made public and could be used.
What should teams do if they cannot immediately patch?
The available information does not provide a vendor workaround or mitigation. Restrict local access to affected systems and reduce exposure to untrusted local users while assessing whether MSI Dragon Center is installed.