CVE-2026-39254

CriticalCVSS 9.8

Published: 17/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib and CxAudioHidDevice::DeviceGetDescriptionString components.

Risk Assessment

An attacker can exploit the buffer overflow to execute malicious code on the victim's machine, potentially leading to system takeover or data theft.

Recommendation

Update SteelSeries GG to the latest version and limit trust in unknown input sources.

Original NVD description (English source)

Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, CxAudioHidDevice::DeviceGetDescriptionString components