CVE-2026-94129

HIGH 8.8

BioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub_1105C of the file BS_RVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. The attack needs to be approached locally. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-123 CWE-119
Vendor	biostar
Product	valkyrie aurora
Published	Sep 21, 2026

Stay Ahead of the Next One

Get instant alerts for biostar valkyrie aurora

Be the first to know when new high vulnerabilities affecting biostar valkyrie aurora are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

BioStar / VALKYRIE AURORA

2.10.2411.0800

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/408049 vuldb.com: https://vuldb.com/vuln/408049/cti vuldb.com: https://vuldb.com/cve/CVE-2026-94129 vuldb.com: https://vuldb.com/submit/893721

Credits

🔍 Bigcat (VulDB User) VulDB CNA Team