Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-15029

Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physic

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ASUS

Description

Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protections. Refer to the '  Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS System Control Interface v3

Default version status: unaffected

  • before v3.1.65.0affected

ASUS System Control Interface

Default version status: unaffected

  • before v1.1.40.0affected

ASUS Business Manager

Default version status: unaffected

  • through v3.0.38.0affected

References