CVE-2026-94424

Received Received - Intake

Heap-based Buffer Overflow in Moore Threads MTT S80 Driver

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: VulDB

Description

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-21

Last Modified

2026-09-21

Generated

2026-09-22

AI Q&A

2026-09-22

EPSS Evaluated

N/A

NVD

CVE-2026-94424

Affected Vendors & Products

Vendor	Product	Version / Range
moore_threads	mtt_s80_driver_package	to 340.150 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This is a heap-based buffer overflow vulnerability in the Moore Threads MTT S80 Driver Package up to version 340.150. It exists in the function sub_140001000 within the mtdispkm64.sys library, specifically in the IOCTL Handler component. The flaw allows manipulation that leads to memory corruption.

Detection Guidance

This vulnerability requires local access to exploit and involves a heap-based buffer overflow in the mtdispkm64.sys driver. Detection may involve monitoring for unusual driver behavior or crashes. Check for the presence of the vulnerable driver file (mtdispkm64.sys) in system directories. Use system monitoring tools to detect abnormal memory usage or crashes in the driver process.

Impact Analysis

An attacker could exploit this locally to execute arbitrary code, escalate privileges, or cause system crashes. Since it requires local access, the risk is higher for systems with untrusted users or compromised environments. The high CVSS scores indicate significant impact on confidentiality, integrity, and availability.

Compliance Impact

This vulnerability, a heap-based buffer overflow in the Moore Threads MTT S80 Driver Package, could potentially lead to unauthorized access or data corruption on local systems. While not directly tied to GDPR or HIPAA, such vulnerabilities may violate compliance requirements that mandate secure data handling and protection against unauthorized access, depending on the system's use case and data processed.

Mitigation Strategies

Since the vendor did not respond, immediate mitigation involves removing or disabling the vulnerable driver (mtdispkm64.sys) if present. Restrict local access to systems where this driver is installed. Monitor for any signs of exploitation or unusual activity related to the driver. Consider updating to a newer version of the MTT S80 Driver Package if available.

Hi! I’m here to help you understand CVE-2026-94424. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70