VULNERABILITY INTELLIGENCE
CVE-2026-3508
CVSS score6.8 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-05-08
Last modified2026-10-26
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Description
An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system crash (BSOD) via a read size that exceeds the buffer size.Refer to the ' Security Update for MyASUS ' section on the ASUS Security Advisory for more information.
Weakness classification
- CWE-125: Out-of-bounds Read