CVE-2026-23762: falha de média gravidade em VB-Audio Software Matrix
VB-Audio Voicemeeter & Matrix Drivers DoS via MmMapLockedPagesSpecifyCache
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.2%
VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively), as well as VB-Audio Matrix and Matrix Coconut (versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively), contain a vulnerability in their virtual audio drivers (vbvoicemeetervaio64*.sys, vbmatrixvaio64*.sys, vbaudio_vmauxvaio*.sys, vbaudio_vmvaio*.sys, and vbaudio_vmvaio3*.sys). The drivers map non-paged pool memory into user space via MmMapLockedPagesSpecifyCache using UserMode access without proper exception handling. If the mapping fails, such as when a process has exhausted available virtual address space, MmMapLockedPagesSpecifyCache raises an exception that is not caught, causing a kernel crash (BSoD), typically SYSTEM_SERVICE_EXCEPTION with STATUS_NO_MEMORY. This flaw allows a local unprivileged user to trigger a denial-of-service on affected Windows systems.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
VB-Audio Software · MatrixVB-Audio Software · Matrix CoconutVB-Audio Software · Voicemeeter BananaVB-Audio Software · Voicemeeter PotatoVB-Audio Software · Voicemeeter (Standard)CVEs relacionadas — VB-Audio Software Matrix
No mesmo produto, das mais perigosas para as menos.
CVE-2026-23761MEDIUMVB-Audio Voicemeeter & Matrix Drivers DoS via Improper FILE_OBJECT FsContext InitializationEPSS 0.2%CVE-2026-23763HIGHVB-Audio Matrix Drivers Local Privilege Escalation via Kernel Memory ExposureEPSS 0.2%CVE-2026-23764MEDIUMVB-Audio Voicemeeter & Matrix Drivers DoS via Corrupted IoAllocateMdl LengthEPSS 0.2%
Referências
https://forum.vb-audio.com/viewtopic.php?p=7527#p7527https://forum.vb-audio.com/viewtopic.php?p=7574#p7574https://github.com/emkaix/security-research/tree/main/CVE-2026-23762https://vb-audio.com/https://www.vulncheck.com/advisories/vb-audio-voicemeeter-and-matrix-drivers-dos-via-mmmaplockedpagesspecifycache