Asus Asci vulnerabilities

CVE-2025-12793 [HIGH] CWE-426 CVE-2025-12793: An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker may influence the application to load a DLL from an attacker-controlled location, potentially resulting in arbitrary code execution. Refer to the ' Security Update for MyASUS' section on the ASUS Security Advisory for more information.

CVE-2025-2027 [MEDIUM] CWE-415 CVE-2025-2027: A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerabil A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in some rare circumstances. Refer to the 'Security Update for MyASUS' section on the ASUS Security Advisory for more i

CVE-2024-55408 [MEDIUM] CWE-862 CVE-2024-55408: An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of softwa An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied.