CVE-2026-94146

Summary

The flaw allows an attacker to manipulate the PhysicalAddress/Size argument, leading to a write-what-where condition, which can be exploited locally to gain unauthorized access or control.

Exploitability

Exploitation requires local access and manipulation of the PhysicalAddress/Size argument, making it moderately difficult.

Blast radius

If exploited, the vulnerability could result in unauthorized access or control of the system, potentially leading to data theft or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to BioStar BIOS Update Utility 1.9.7.4 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.