Buffer overflow in ASUS Armoury Crate
CVE-2025-9338
A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerability can be triggered by manually executing a specially crafted process, potentially leading to local privilage escalation. For additional information, please refer to the 'Security Update for Armoury Crate App' section of the ASUS Security Advisory.
Vulnerability class: Buffer Overflow
EPSS: 0.001 (2.4th percentile) — read the EPSS interpretation.
Affected products
- Asus Armoury Crate — versions 6.2.11 and earlier
Weakness classification (CWE)
References
- 54bf65a7-a193-42d2-b1ba-8e150d3c35e1 (vendor-advisory)