Gigabyte Control Center Performance Library Insecure Deserialization Vulnerability Allowing Privilege Escalation

A vulnerability allowing insecure deserialization has been identified in the Performance Library component of Gigabyte Control Center, affecting versions prior to 25.12.31.01. This vulnerability allows authenticated local attackers to send malicious serialized payloads to the EasyTune Engine service, leading to privilege escalation.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation.

Remediation

Users are advised to update to version 25.12.31.01 or later.