Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-8917

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary mem

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ASUS

Description

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the '  Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin   ' section on the ASUS Security Advisory for more information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS GPU Tweak III

Default version status: unaffected

  • through V2.1.1.7affected

ASUS GPUTweakII

Default version status: unaffected

  • through V2.4.0.0affected

ASUS AI Suite3

Default version status: unaffected

  • through V2.1.2.0affected

ASUS VGAdll

Default version status: unaffected

  • through V0.0.7.8affected

References