CVE-2026-90890 — ASRock｜ASRock Polychrome SYNC/RGB software utility - Untrusted Pointer Dereference

CVE-2026-90890

ASRock｜ASRock Polychrome SYNC/RGB software utility - Untrusted Pointer Dereference PUBLISHED

Description (CNA)

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash.

Affected (CNA)

Vendor / product	Versions
ASRock / ASRock Polychrome SYNC/RGB for MB	affected 0 through 1.0.118
ASRock / ASRock Polychrome SYNC/RGB for VGA	affected 0 through 2.0.219

CWE

CWE-822

References

https://www.twcert.org.tw/tw/cp-132-11205-f6677-1.html
https://www.twcert.org.tw/en/cp-139-11204-6b1c6-2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.