VULNERABILITY INTELLIGENCE
CVE-2025-9338
EPSS probability0.13%
CISA KEVNot currently listed
Published2025-11-06
Last modified2026-10-07
Description
A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerability can be triggered by manually executing a specially crafted process, potentially leading to local privilage escalation. For additional information, please refer to the 'Security Update for Armoury Crate App' section of the ASUS Security Advisory.
Weakness classification
- 54bf65a7-a193-42d2-b1ba-8e150d3c35e1: CWE-119