Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-4416

GIGABYTE|Performance Library - Insecure Deserialization

Description

The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GIGABYTE Performance Library

Default version status: unaffected

  • 0 to < 25.12.31.01affected

References