VULNERABILITY INTELLIGENCE
CVE-2025-2027
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-03-28
Last modified2026-06-17
Description
A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in some rare circumstances. Refer to the 'Security Update for MyASUS' section on the ASUS Security Advisory for more information.
Weakness classification
- 54bf65a7-a193-42d2-b1ba-8e150d3c35e1: CWE-415