Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-88781

Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subs

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ASUS

Description

Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS motherboards firmware

Default version status: unaffected

  • A520/B550 series Before 3644 4304affected
  • X570 Series Before 5054affected
  • A620/A620A Series Before 4003 4004affected
  • B650 Series Before 1303 4003 4004affected
  • X670 Series Before 4003 4004affected
  • B840 Series Before 1804affected
  • B850 Series Before 1103 1804 2503affected
  • X870 Series Before 1804 2503affected
  • X870E Series Before 1103 2503affected
  • Knoll Series Before 4003affected
  • TRX50 Series Before 0703 1403affected
  • W790 Series Before 2101affected
  • WRX90 Series Before 1403affected

References