Buffer Overflow and Crashing

[icedterminal]

I started logging and monitoring after iCUE crashed and refused to open after an update. Corsair.Service.CpuIdRemote64.exe and Corsair.Service.exe constantly ping the registry. Often with errors.

 

Process Name: Corsair.Service.CpuIdRemote64.exe

High Resolution Date & Time: 11/9/2020 01:47:36.3212598

Event Class: Registry

Operation: RegQueryValue

Result: BUFFER OVERFLOW

Path: HKLM\System\CurrentControlSet\Enum\PCI\VEN_10DE&DEV_1E87&SUBSYS_21833842&REV_A1\4&1fc990d7&0&0019\HardwareID

TID: 7656

Duration: 0.0000033

Length: 268

 

Process Name: Corsair.Service.exe

High Resolution Date & Time: 11/9/2020 01:47:39.1640496

Event Class: Registry

Operation: RegQueryValue

Result: BUFFER OVERFLOW

Path: HKLM\SOFTWARE\Corsair\Corsair Utility Engine\CLinkPids

TID: 14012

Duration: 0.0000020

Length: 144

 

And in a lot of cases, the target key isn't anything meaningful. Literally targeting the root tree.

 

Process Name: Corsair.Service.exe

High Resolution Date & Time: 11/9/2020 01:47:39.1646596

Event Class: Registry

Operation: RegQueryKey

Result: SUCCESS

Path: HKLM

TID: 8156

Duration: 0.0000053

Query: Name

 

You can't fault the hardware here either. This is a software issue. No other process displays Buffer Overflow as the Result. Learn about it here: https://www.cloudflare.com/learning/security/threats/buffer-overflow/

 

Corsair.Service.DisplayAdapter.exe crashes too often. Users have found using a previous version, v3.25.02, solves this. This alone is a problem. On a fresh boot it will crash up to ten times in a row until started. Under the surface Corsair.Service.DisplayAdapter.exe is constantly creating and exiting threads. It's doing this less than every second. What for? Could this be the reason for excess CPU?

 

When looking at other active threads, the only other process that repeats this behavior on a clean system is SVCHOST. Which is normal. It's expected to see programs create and exit threads but not on such a scale as iCUE services exhibits. It fills the log.

 

Also, when installing iCUE, it reports it failed to install successfully and rundll has crashed a dozen times along with it.