Buffer overflow in Asus Armoury Crate
CVE-2025-9338
A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerability can be triggered by manually executing a specially crafted process, potentially leading to local privilage escalation…
Vulnerability class: Buffer Overflow
EPSS: 0.000 (6.3th percentile) — read the EPSS interpretation.
Affected products
- Asus Armoury Crate — versions 6.2.11 and earlier
Weakness classification (CWE)
References
- www.asus.com/security-advisory/ (vendor-advisory)