Out-of-bounds Read in Asus System Control Interface

CVE-2026-3508

An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system crash (BSOD) via a read size that exceeds the buffer size.Refer to the ' Security Update for MyASUS ' section on…

Vulnerability class: Buffer Overflow

EPSS: 0.000 (0.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References