Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-90890

ASRock｜ASRock Polychrome SYNC/RGB software utility - Untrusted Pointer Dereference

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASRock ASRock Polychrome SYNC/RGB for MB

Default version status: unaffected

  • 0 to ≤ 1.0.118affected

ASRock ASRock Polychrome SYNC/RGB for VGA

Default version status: unaffected

  • 0 to ≤ 2.0.219affected

References