A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLib_X64.sys of the component MMIO Write Path Handler. Performing a manipulation of the argument count/elementSize results in integer overflow. The attack requires a local approach. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been identified in MSI Dragon Center up to version 2.0.155.0, specifically in the MmioWritePath function within the NTIOLib_X64.sys library. The flaw resides in the MMIO Write Path Handler component, where manipulation of the count/elementSize arguments leads to an integer overflow condition. The vulnerability requires local access to exploit, limiting its attack surface but not eliminating risk for multi-user or shared systems. A public exploit has been released, increasing the likelihood of active exploitation. The vendor was notified prior to public disclosure but did not respond, leaving users without an official patch or mitigation guidance. This unpatched status, combined with public exploit availability, raises the overall risk level significantly.