The vulnerability resides in the HUION Inspiroy Frego S (L310) Windows Driver version 20.0.1.118. An insecure DLL-loading routine within the driver installer permits a local user to supply and force the loading of arbitrary code. Successful exploitation results in the attacker gaining code execution privileges on the host system, potentially allowing further system compromise or persistence.

Devices equipped with the HUION Inspiroy Frego S (L310) peripheral, specifically those running the 20.0.1.118 driver on Windows. The issue stems from the driver’s installation component and would affect any user who can run the installer or has write access to the driver directory.

The vulnerability is exploitable by a local attacker and yields full control over the affected system. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog, underscoring that this is a relatively new or niche issue. Absent an official patch, the risk remains high for environments where the driver is present and an attacker can execute the installer. The attack vector requires the attacker to run the installer or otherwise influence the DLL-loading path within the driver installation process.