CVE-2025-9338 - A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver · CoreCVE

Back Back to CVE browser

HIGH

A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver

Published Nov 6, 2025

7.3

HIGH

CVSS 4.0

EPSS 0.12%

Description

A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerability can be triggered by manually executing a specially crafted process, potentially leading to local privilage escalation. For additional information, please refer to the 'Security Update for Armoury Crate App' section of the ASUS Security Advisory.

Affected products

Vendor ASUS Product Armoury Crate Default
unaffected
- Version
  6.2.11 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
6.2.11 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (1)

https://www.asus.com/security-advisory/
vendor-advisory

Link	Providers	Tags
https://www.asus.com/security-advisory/		vendor-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ASUS

Published Nov 6, 2025

Updated Nov 6, 2025

Reserved Aug 22, 2025

Link CVE-2025-9338

CISA Vulnrichment

Updated Nov 6, 2025

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-9338

Severity n/a

Public date n/a

Links CVE-2025-9338

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a