Read the docs
TI-2026-61763 Aliases CVE-2026-90890GHSA-rv3j-88mf-j5v9

ASRock｜ASRock Polychrome SYNC/RGB software utility - Untrusted Pointer Dereference

Priority LOW 29CWE-822Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-822 and the CVSS impact.

Summary

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00136 3rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ASRockASRock Polychrome SYNC/RGB for MBup to 1.0.118—No fix listedCNA
ASRockASRock Polychrome SYNC/RGB for VGAup to 2.0.219—No fix listedCNA
  • ASRock Polychrome SYNC/RGB for MB VendorASRock Affected up to 1.0.118 Fixed in — No fix listed CNA
  • ASRock Polychrome SYNC/RGB for VGA VendorASRock Affected up to 2.0.219 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-90890
  2. 2026-10-03 Alias added: GHSA-rv3j-88mf-j5v9

References

Advisory 2

  • TI-2020-12115 AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space… CVSS 3.1MEDIUM 6.1
  • TI-2020-10996 ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM. CVSS 3.1CRITICAL 9.8
  • TI-2018-07578 The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1… CVSS 3.0HIGH 7.8
  • TI-2018-07577 The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1… CVSS 3.0HIGH 7.8
  • TI-2018-07575 The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1… CVSS 3.0HIGH 7.8
  • TI-2025-13067 ASRock, ASRockRack, ASRockInd｜Motherboard - Protection Mechanism Failure CVSS 4.0HIGH 7.0
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences