CVE-2025-9337CWE-476

CVE-2025-9337

published October 13, 2025

CVSS
6.8
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

A null pointer dereference has been identified in the AsIO3.sys driver. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD).

Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
6.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00133 · 2.5th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-10-13T14:15Z
References (1)
EPSS history
Timeline
  • 13 OCT 09:24Z
    A null pointer dereference has been identified in the AsIO3.sys driver
    cvelistv5