CVE-2025-2027CWE-415

A double free vulnerability has been identified in the ASUS System Analysis service

Medium · published March 28, 2025

CVSS v4.0
5.9
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in some rare circumstances.

Refer to the 'Security Update for MyASUS' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS v4.0
5.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
EPSS
0.00169 · 6.0th percentile
Weakness
CWE-415 · Double Free
Published
2025-03-28T05:34Z
EPSS history
Timeline
  • 28 MAR 05:34Z
    A double free vulnerability has been identified in the ASUS System Analysis service
    cvelistv5