CVE-2026-94128: BioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where
A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub1105C of the file BSLED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can realistically exploit this issue?
An attacker needs local access and low-level privileges on a system running the affected software. No user interaction is required.
What is the likely impact if exploitation succeeds?
The issue is rated high severity and can affect confidentiality, integrity, and availability at high impact. The CVSS vector also indicates a scope change.
How urgent is remediation?
Public exploit disclosure has occurred, so the issue may be used by attackers. The vendor was contacted but did not respond, and no vendor fix or workaround is provided in the available data.
How can I identify potentially affected installations?
Check whether BioStar VIVID LED DJ version 4.0.2411.1500 is installed. The affected component is the BS_LED64.sys driver.