A critical insecure deserialization vulnerability in the Gigabyte Control Center Performance Library allows authenticated local attackers to escalate privileges on the host system.

This flaw is an insecure deserialization vulnerability (CWE-502) located within the Performance Library component. An authenticated local attacker can transmit a malicious serialized payload to the EasyTune Engine service to gain elevated privileges.

The ability for a local user to escalate privileges poses a significant threat to internal system integrity and confidentiality. Given the CVSS score of 7.8, this vulnerability is classified as High severity, as it enables an attacker to bypass standard operating system access controls and potentially gain full control over the affected machine.

Immediate Action: Update the Gigabyte Performance Library to version 25.12.31.01 or later to resolve the deserialization flaw.

Proactive Monitoring: Monitor system logs for unauthorized attempts to interact with the EasyTune Engine service or irregular process executions originating from local user accounts.

Compensating Controls: Restrict local user permissions where possible and ensure the principle of least privilege is enforced to limit the impact of potential local privilege escalation attempts.

Public Exploit Available: Unknown

Organizations utilizing Gigabyte Control Center should prioritize updating the Performance Library component to version 25.12.31.01 immediately. Although this vulnerability requires local access, the potential for full privilege escalation necessitates a rapid patch cycle to maintain the security posture of local workstations and servers.