CVE-2025-9338

CWE-119 — Buffer Overflow3 documents3 sources
Severity
7.3HIGH
EPSS
0.0%
top 95.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Asus Armoury Crate
Timeline
PublishedNov 6

Description

A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerability can be triggered by manually executing a specially crafted process, potentially leading to local privilage escalation. For additional information, please refer to the 'Security Update for Armoury Crate App' section of the ASUS Security Advisory.

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

▶CVEListV5asus/armoury_crate6.2.11 and earlier

🔴Vulnerability Details

2
GHSA
GHSA-89rw-3v7g-7694: A improper restriction of operations within the bounds of a memory buffer exists in AsIO3↗2025-11-06
▶
CVEList
CVE-2025-9338: A improper restriction of operations within the bounds of a memory buffer exists in AsIO3↗2025-11-06
▶