CVE-2021-47786
Published: 16 January 2026
Summary
CVE-2021-47786 is a medium-severity Out-of-bounds Write (CWE-787) vulnerability in Redragon M725-Lit Firmware. Its CVSS base score is 6.8 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 8.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SC-41 (Port and I/O Device Access) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2021-47786 is a kernel-level vulnerability in the Redragon Gaming Mouse driver, classified as CWE-787. The flaw enables attackers to trigger a denial of service by sending malformed IOCTL requests, specifically a crafted 2000-byte buffer with particular byte patterns to the REDRAGON_MOUSE device, causing the kernel driver to crash. It carries a CVSS score of 7.5 under CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, highlighting high availability impact with no confidentiality or integrity effects.
Unauthenticated remote attackers can exploit this vulnerability with low complexity and no user interaction, as indicated by the CVSS vector. Exploitation involves delivering the malformed buffer to the affected driver, resulting in a kernel crash and system denial of service.
Advisories and proof-of-concept exploits are documented in references such as the Quadron Research Lab GitHub repository, Exploit-DB entry 50322, Vulncheck advisory on the Redragon Gaming Mouse denial of service, and the vendor site at redragonzone.com. No specific patch or mitigation details are outlined in the provided references.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-3011
Vulnerability details
Redragon Gaming Mouse driver contains a kernel-level vulnerability that allows attackers to trigger a denial of service by sending malformed IOCTL requests. Attackers can send a crafted 2000-byte buffer with specific byte patterns to the REDRAGON_MOUSE device to crash the…
more
kernel driver.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Kernel driver vulnerability directly enables Endpoint Denial of Service via Application or System Exploitation (T1499.004) by crashing the system with crafted IOCTLs.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly requires validation of all input buffers (including the 2000-byte IOCTL payloads) before they reach the kernel driver, blocking the malformed patterns that trigger the out-of-bounds write and crash.
Explicitly controls logical access to I/O devices and their associated drivers, limiting which processes or users can issue IOCTLs to REDRAGON_MOUSE and thereby preventing unauthenticated exploitation.
Provides denial-of-service protection mechanisms that can throttle or filter malformed device requests before they reach kernel code, mitigating the availability impact described in the CVE.