CVE-2026-94424: Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow

Q: Which installations fall within the reported affected range?

The reported affected range is Moore Threads MTT S80 Driver Package versions up to and including 340.150.

Q: What level of access does an attacker need?

Exploitation must be performed locally and requires low privileges. The vector indicates no user interaction is required.

Q: What is the potential security impact if exploitation succeeds?

The supplied severity vector rates confidentiality, integrity, and availability impact as high, with scope changed.

Published Sep 21, 2026

Updated

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

Moore Threads MTT S80 Driver Package<=340.150

Event History

Sep 21, 2026

CVE Published

via MITRE·08:45 PM

Data Sourced

via MITRE·08:45 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations fall within the reported affected range?

The reported affected range is Moore Threads MTT S80 Driver Package versions up to and including 340.150.

What level of access does an attacker need?

Exploitation must be performed locally and requires low privileges. The vector indicates no user interaction is required.

What is the potential security impact if exploitation succeeds?