CVE-2025-9336 - A stack buffer overflow has been identified in the AsIO3.sys driver · CoreCVE

Back Back to CVE browser

MEDIUM

A stack buffer overflow has been identified in the AsIO3.sys driver

Published Oct 13, 2025

6.8

MEDIUM

CVSS 4.0

EPSS 0.15%

Description

A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may leading to a system crash (BSOD) or other potentially undefined execution. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

Affected products

Vendor ASUS Product Armoury Crate Default
unaffected
- Version
  Before v6.3.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
Before v6.3.4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-121

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-34060
Advisory
https://www.asus.com/security-advisory/
vendor-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-34060		Advisory
https://www.asus.com/security-advisory/		vendor-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ASUS

Published Oct 13, 2025

Updated Oct 14, 2025

Reserved Aug 22, 2025

Link CVE-2025-9336

CISA Vulnrichment

Updated Oct 14, 2025

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-9336

Severity n/a

Public date n/a

Links CVE-2025-9336

Assigner ASUS

Published Oct 13, 2025

Updated Oct 14, 2025

Exploited since n/a

Link EUVD-2025-34060

EUVD-2025-34060