IOCTL Handler Vulnerability in SignalRGB Software by SignalRGB

CVE-2026-8050

What is CVE-2026-8050?

In earlier versions of SignalRGB, specifically those before 1.3.7.0, a significant vulnerability exists within the IOCTL handlers. This issue arises from the improper handling of the SystemBuffer pointer, where seven out of thirteen handlers do not verify if the pointer is non-NULL. When an IOCTL command is executed with an empty input buffer, it leads to a NULL pointer dereference, which can cause a kernel crash, potentially impacting system stability and security.

References