A heap‑based buffer overflow occurs in the sub_140001000 function of mtdispkm64.sys, an IOCTL handler in the Moore Threads MTT S80 Driver Package. The overflow can be triggered by malformed IOCTL input and may allow an attacker to execute arbitrary code on the affected system, compromising data, integrity, and availability. The vulnerability is limited to the local context because the exploit requires interaction with the driver via a local IOCTL interface.

The issue affects the Moore Threads MTT S80 Driver Package versions up to 340.150. The driver package is used in embedded or industrial devices that run Windows operating systems and expose the mtdispkm64.sys component for device I/O control. Devices that have not upgraded beyond the affected version are directly impacted.

The CVSS score of 9.3 reflects the high severity of this local exploitation risk. EPSS is not available, and the vulnerability is not listed in CISA’s KEV catalog, so no evidence of active exploitation is reported yet. The attack vector is inferred to be local, requiring an attacker with local or privileged access to issue the malformed IOCTL request. The lack of an official fix from the vendor underscores the urgency of mitigation.