Privilege Escalation Vulnerability in Colorful iGameCenter by Colorful
CVE-2026-109520

9.3CRITICAL

Key Information:

Vendor

Colorful

Status
Igamecenter
Vendor
CVE Published:
13 October 2026

What is CVE-2026-109520?

A vulnerability exists in Colorful iGameCenter version 2.0.0.82, primarily within the MmMapIoSpace function found in the AMDRyzenMasterDriver.sys library. The flaw allows for manipulation of the SystemBuffer argument, which could lead to unauthorized actions with elevated privileges. This vulnerability requires local access to exploit, and efforts to notify Colorful regarding this issue have gone unaddressed. Users of the affected product are advised to monitor for updates and implement necessary security measures.

Affected Version(s)

iGameCenter 2.0.0.82

References

https://vuldb.com/vuln/417176
vdb-entrytechnical-description
https://vuldb.com/vuln/417176/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-109520
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Element2023H (VulDB User)
VulDB CNA Team
.