Description
A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack needs to be launched locally. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-10-13
Score: 9.3 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation
Action: Immediate Patch
AI Analysis

Impact

A flaw exists in the Colorful iGameCenter 2.0.0.82 component Dispatch Handler, where the MmMapIoSpace function in the AMDRyzenMasterDriver.sys library can be exploited by manipulating the SystemBuffer argument. This manipulation results in privileges being assigned through unsafe actions, effectively allowing a local user to gain elevated rights on the affected system.

Affected Systems

The vulnerability impacts the Colorful iGameCenter product version 2.0.0.82, specifically the AMDRyzenMasterDriver.sys driver used by the Dispatch Handler component.

Risk and Exploitability

The CVSS score of 9.3 reflects a high severity for privilege escalation. The EPSS score is not available, and the vulnerability is not currently listed in CISA KEV. Attackers must be local to the system to exploit the flaw; there is no known remote exploitation path. Given the high CVSS and the local nature of the attack, the risk is significant for environments where the driver resides.

Generated by OpenCVE AI on October 13, 2026 at 18:14 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor‑issued patch or upgrade to a fixed release of iGameCenter that resolves the MmMapIoSpace issue, if one is available.
  • If a patch is not yet available, prevent the vulnerable driver from loading by disabling or uninstalling AMDRyzenMasterDriver.sys through Device Manager or PowerShell.
  • Implement application whitelisting or set restrictive NTFS permissions on the driver file to block its execution until the vendor releases a fix.

Generated by OpenCVE AI on October 13, 2026 at 18:14 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
Description A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack needs to be launched locally. The vendor was contacted early about this disclosure but did not respond in any way.
Title Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions
First Time appeared Colorful
Colorful igamecenter
Weaknesses CWE-266
CWE-267
CPEs cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*
Vendors & Products Colorful
Colorful igamecenter
References
Metrics cvssV2_0

{'score': 6.8, 'vector': 'AV:L/AC:L/Au:S/C:C/I:C/A:C/E:ND/RL:ND/RC:UR'}

cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X'}

Subscriptions

Colorful Igamecenter
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-15T15:12:23.910Z

Reserved: 2026-10-12T18:53:27.904Z

Link: CVE-2026-109520

cve-icon Vulnrichment

Updated: 2026-10-15T13:51:09.263Z

cve-icon NVD

Status : Deferred

Published: 2026-10-13T14:17:26.800

Modified: 2026-10-15T16:17:44.113

Link: CVE-2026-109520

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T18:30:07Z

Weaknesses
  • CWE-266

    Incorrect Privilege Assignment

  • CWE-267

    Privilege Defined With Unsafe Actions