CVE-2026-23764
Memory Corruption in VB-Audio Drivers Causes Local DoS
Publication date: 2026-01-22
Last updated on: 2026-01-22
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| vb-audio | voicemeeter | to 1.1.9 (inc) |
| vb-audio | voicemeeter_banana | to 2.1.9 (inc) |
| vb-audio | voicemeeter_potato | to 3.1.9 (inc) |
| vb-audio | matrix | to 1.0.2.2 (inc) |
| vb-audio | matrix_coconut | to 2.0.2.2 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-823 | The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-23764 is a vulnerability in the virtual audio drivers of VB-Audio's Voicemeeter and Matrix software. The drivers allocate non-paged pool memory and map it into user space, exposing a length value that an unprivileged local attacker can modify. When the driver later handles IOCTL requests, it uses this corrupted length value without proper integrity checks to allocate memory, which can cause a kernel crash (Blue Screen of Death) due to invalid memory access. This flaw allows a local user to trigger a denial-of-service on affected Windows systems. [5, 2]
How can this vulnerability impact me? :
This vulnerability can be exploited by a local attacker with low privileges to cause a denial-of-service (DoS) condition on affected Windows systems running VB-Audio's Voicemeeter or Matrix software. The attacker can trigger a kernel crash (BSoD), leading to system instability and potential disruption of audio services or other operations dependent on the system's availability. [5, 2]
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the VB-Audio software to the latest versions that include the security patches addressing CVE-2026-23764. Specifically, update the VAIO driver to version 3.4.1.7 or later, as this version contains fixes for this and related vulnerabilities. Applying these updates will prevent exploitation of the IOCTL handling flaw and improve driver stability and security. [2]