In SignalRGB kernel driver versions prior to 1.3.7.0, seven of the thirteen IOCTL handlers dereference the SystemBuffer pointer without first verifying that it is non‑NULL. Sending an IOCTL with an empty input buffer causes a NULL pointer dereference, leading to a kernel crash and a system‑wide denial of service. The vulnerability is rated as high‑severity with a CVSS score of 7.5, reflecting the impact on availability.

The vulnerability affects the SignalRGB kernel driver shipped with the SignalRGB application on Windows platforms when the driver version is earlier than 1.3.7.0. Users running these outdated driver files are susceptible; no other operating systems or product versions are listed.

The EPSS score is below 1 %, and the vulnerability is not listed in the CISA KEV catalog, indicating a low likelihood of exploitation in the wild. Based on the description, it is inferred that invoking the vulnerable IOCTLs requires local privileges, as the driver is accessible only to processes with elevated rights. Consequently, the attack vector is local, and the risk is concentrated on systems with the unpatched driver and privileged users or processes.