The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation.
| Vendor | Product | Versions |
|---|---|---|
| gigabyte | performance library | 0 |
Updated severity to CRITICAL, added patch version 25.12.31.01, and corrected exploit availability status.
Initial creation
