CVE-2026-94128 BioStar CVE debrief

Who should care

Defenders responsible for systems using BioStar VIVID LED DJ 4.0.2411.1500 should assess exposure to local attacks and prioritize verification of the presence of this software. Operators of BioStar VIVID LED DJ 4.0.2411.1500 should review the vulnerability details and plan for remediation. Platform administrators and security teams should also review the vulnerability and assess the potential impact on their systems.

Why it matters

Defenders should prioritize verifying the presence of BioStar VIVID LED DJ 4.0.2411.1500 and assessing exposure to local attacks. The vulnerability has a high CVSS score of 8.5, indicating a significant potential impact. However, details about exploitation and impact are sparse, and remediation priority is uncertain.

• Verification of BioStar VIVID LED DJ 4.0.2411.1500 presence is required
• Local access is required for potential exploitation
• Remediation priority is uncertain due to limited information

Technical summary

The vulnerability affects the function sub_1105C of the file BS_LED64.sys of the component IOCTL Handler in BioStar VIVID LED DJ 4.0.2411.1500. The manipulation of the argument AssociatedIrp leads to write-what-where condition. Local access is required to approach this attack. The vulnerability has a high CVSS score of 8.5, indicating a significant potential impact. However, details about exploitation and impact are sparse, and remediation priority is uncertain. Defenders should prioritize verifying the presence of BioStar VIVID LED DJ 4.0.2411.1500 and assessing exposure to local attacks.

Defensive priority

Defenders should prioritize verifying the presence of BioStar VIVID LED DJ 4.0.2411.1500 and assessing exposure to local attacks. Remediation priority is uncertain due to limited information.

Recommended defensive actions

• Verify the presence of BioStar VIVID LED DJ 4.0.2411.1500
• Assess exposure to local attacks
• Monitor for publicly disclosed exploits
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. The exploit has been disclosed publicly, but details about exploitation and impact are sparse. Defenders should verify the presence of BioStar VIVID LED DJ 4.0.2411.1500 and assess exposure to local attacks. The source confidence is limited, and the affected scope is uncertain.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.