NULL pointer dereference in Asus Ai Suite
CVE-2025-6398
A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD). Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more information.
EPSS: 0.002 (4.7th percentile) — read the EPSS interpretation.
Affected products
- Asus Ai Suite — versions before v3.03.42
Weakness classification (CWE)
References
- 54bf65a7-a193-42d2-b1ba-8e150d3c35e1 (vendor-advisory)