CVE-2026-90503
Received Received - Intake

Information Disclosure in Ludashi via ComputerZ_x64.sys

Publication date: 2026-09-13

Last updated on: 2026-09-13

Assigner: VulDB

Description
A flaw has been found in Chengdu Qilu Technology Ludashi 6.1026.4715.714. The affected element is the function sub_11008 in the library ComputerZ_x64.sys. Executing a manipulation of the argument PhysicalAddress can lead to information disclosure. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-13
Last Modified
2026-09-13
Generated
2026-09-13
AI Q&A
2026-09-13
EPSS Evaluated
N/A
NVD
CVE-2026-90503
EUVD
EUVD-2026-76976

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
chengdu_qilu_technology_ludashi 6.1026.4715.714 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in Chengdu Qilu Technology Ludashi 6.1026.4715.714, specifically in the function sub_11008 within the ComputerZ_x64.sys library. It allows local attackers to manipulate the PhysicalAddress argument to disclose sensitive information. The exploit is publicly available and the vendor did not respond to the disclosure.

Detection Guidance

Detection requires checking for the presence of the vulnerable Ludashi software version 6.1026.4715.714 and inspecting the ComputerZ_x64.sys driver for the function sub_11008. No specific commands are provided in the context.

Impact Analysis

If you use Ludashi 6.1026.4715.714, an attacker with local access could exploit this flaw to read sensitive data from your system. This could include personal or confidential information stored or processed by the software.

Compliance Impact

This vulnerability could lead to unauthorized information disclosure, which may violate GDPR (data protection) or HIPAA (health data privacy) requirements. Organizations using this software must address it to maintain compliance.

Mitigation Strategies

Immediate mitigation includes uninstalling or updating Ludashi to a non-vulnerable version. Since the vendor did not respond, consider removing the software entirely. Monitor for unusual activity related to the driver.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-90503. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart