Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2026-15030

Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the inte

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ASUS

Description

Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation. Refer to the ' Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS System Control Interface v3

Default version status: unaffected

  • before v3.1.65.0affected

ASUS System Control Interface

Default version status: unaffected

  • before v1.1.40.0affected

ASUS Business Manager

Default version status: unaffected

  • through v3.0.38.0affected

References