CVEvulnerability
CVE-2026-12166
5.5 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-07-02
- Last modified
- 2026-10-25
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted requests that trigger a system crash.
References
- https://github.com/FzRsLLaSheR/CVE-2026-12166_CVE-2026-12167_CVE-2026-12168 github.com
- https://kb.cert.org/vuls/id/639124 kb.cert.org
- https://www.littleorbit.com/ www.littleorbit.com