Memory Leak Vulnerability in Almico Speedfan 4.52 Affecting MSR Index Handler
CVE-2026-19382

4.6MEDIUM

Key Information:

Vendor: Almico
Status: Speedfan
Vendor: CVE Published:; 10 August 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-19382?

A memory leak vulnerability exists in Almico Speedfan 4.52 within the function KiSystemCall64 of the speedfan.sys library, associated with the MSR Index Handler. An attacker can exploit this weakness through local manipulation, leading to unintended memory exposure. Publicly available exploit codes further complicate the security landscape. Despite early disclosure attempts to the vendor, no response has been received, raising concerns about the urgency of addressing this issue.

Affected Version(s)

Speedfan 4.52

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-19382 - Proof of Concept