Out-of-bounds Read in Asus Business System Control Interface
CVE-2025-15038
An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to a disclo…
Vulnerability class: Buffer Overflow
EPSS: 0.000 (6.1th percentile) — read the EPSS interpretation.
Affected products
- Asus Business System Control Interface — versions 0