CVE-2025-9338CWE-119

CVE-2025-9338

published November 6, 2025

CVSS
7.3
EPSS
0%
Percentile
2.6
In the wild
Unconfirmed
What it is

A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerability can be triggered by manually executing a specially crafted process, potentially leading to local privilage escalation.

For additional information, please refer to the 'Security Update for Armoury Crate App' section of the ASUS Security Advisory.

The record
Technical detail
CVSS
7.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00134 · 2.6th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-11-06T11:15Z
References (1)
EPSS history
Timeline
  • 06 NOV 06:02Z
    A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver
    cvelistv5