CVE-2026-94142 | BioStar Temperature Monitor Utility 1.2.1806.2200 IOCTL BS_HWMIO64_W10.sys sub_1105C PhysicalAddress write-what-where

A vulnerability described as critical has been identified in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub_1105C of the file BS_HWMIO64_W10.sys of the component IOCTL Handler. Such manipulation of the argument PhysicalAddress leads to write-what-where condition.

This vulnerability is documented as CVE-2026-94142. The attack needs to be performed locally. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More