CVE-2026-12166

Summary

A NULL pointer dereference vulnerability for driver GFAC_Sys_x64.sys in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted requests that trigger a system crash.

Affected Software

Weaknesses

• CWE-476 NULL Pointer Dereference

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.littleorbit.com/
• https://kb.cert.org/vuls/id/639124
• https://github.com/FzRsLLaSheR/CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

• ←Previous
• Next→