CVE-2026-8050

High · 7.5

CVSS

7.5

EPSS

0.5%

Published

Jun 17, 2026

CISA due date

—

The record

In SignalRGB versions prior to 1.3.7.0, seven of the thirteen IOCTL handlers dereference the SystemBuffer pointer without first verifying that it is non-NULL. Sending an IOCTL with an empty input buffer causes a NULL pointer dereference, resulting in a kernel crash.

Affected packages

Ecosystem	Package	Introduced	Fixed