CVE-2026-94403: ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference
A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must have local access and low-level privileges on a system running ColorFul iGameCenter 1.0.3.4. No user interaction is required.
What is the potential impact after exploitation?
The vulnerability is rated high severity and has impacts on confidentiality, integrity, and availability. The scope is changed, indicating the vulnerable component may affect resources beyond its own security authority.
Is public exploit code available?
Yes. The available data states that an exploit has been publicly disclosed and could be used in attacks.
Is a vendor fix available?
The provided information does not identify a fix. It states that the vendor was contacted early in the disclosure process but did not respond.