Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-9338

A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerability can be triggered by manually executing a specially crafted

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ASUS

Description

A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerability can be triggered by manually executing a specially crafted process, potentially leading to local privilage escalation. For additional information, please refer to the 'Security Update for Armoury Crate App' section of the ASUS Security Advisory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS Armoury Crate

Default version status: unaffected

  • 6.2.11 and earlieraffected

References