Performance Library EUVD-2026-17071

The vulnerability resides in the Performance Library component of Gigabyte Control Center, specifically within the EasyTune Engine service that handles performance tuning and overclocking operations. This service appears to accept serialized objects without proper validation, a classic CWE-502 insecure deserialization flaw. When an application deserializes untrusted data without sanitization, attackers can inject malicious object graphs that execute arbitrary code during the deserialization process. The EasyTune Engine likely runs with elevated privileges (SYSTEM or Administrator) to perform hardware configuration tasks, making it an attractive target for privilege escalation. The CPE identifier cpe:2.3:a:gigabyte:performance_library indicates the vulnerable component is the Performance Library module itself, which is bundled with Gigabyte Control Center software used for managing Gigabyte motherboards and graphics cards. The local attack vector suggests the vulnerability requires the attacker to already have code execution on the target system, positioning this as a second-stage exploitation technique in multi-stage attack chains.