The Gigabyte Performance Library component of the Control Center performs deserialization of untrusted data in an insecure manner. An attacker with local access can craft a malicious serialized payload and send it to the EasyTune Engine service; when processed, the payload can trigger arbitrary code execution, effectively elevating the attacker’s privileges on the affected system.

All installations of Gigabyte Control Center that include the Performance Library and run a version earlier than 25.12.31.01 are affected. Any system where the EasyTune Engine service is active is vulnerable. These installations typically reside on Windows machines used in environments with Gigabyte hardware or software bundles.

The vulnerability carries a CVSS score of 8.5, indicating high severity, while the EPSS score is less than 1%, implying a low probability of current exploitation. It is not listed in the CISA KEV catalog. Attackers must be authenticated locally to send the malicious payload, so the attack vector is local. Successful exploitation would enable the attacker to gain elevated privileges, potentially compromising the entire system.