CVE-2025-11775CWE-125

An out-of-bounds read vulnerability has been identified in the asComSvc service

Medium · published December 17, 2025

CVSS v4.0
4.8
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by sending specially crafted requests, which may lead to a service crash or partial loss of functionality. This vulnerability only affects ASUS motherboard series products. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00124 · 1.9th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-12-17T04:25Z
EPSS history
Timeline
  • 17 DEC 04:25Z
    An out-of-bounds read vulnerability has been identified in the asComSvc service
    cvelistv5