Back to Database
Status published
Medium
CVE-2025-6398
A null pointer dereference vulnerability exists in the IOMap64.sys driver...
Vulnerability Description
A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD). Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-6398
Credits & Attribution
No credits recorded in the NVD database.
More from ASUS
View All →CVE-2025-9968
A link following vulnerability exists in the UnifyScanner component of...
High
8.5
CVE-2025-9338
A improper restriction of operations within the bounds of a...
High
7.3
CVE-2025-9337
A null pointer dereference has been identified in the AsIO3.sys...
Medium
6.8
CVE-2025-9336
A stack buffer overflow has been identified in the AsIO3.sys...
Medium
6.8
CVE-2025-59374
"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client...
Critical
9.3
Affected Vendor
ASUS
View all reports →Affected Software
AI Suite
Vulnerable Versions:
before v3.03.42
Timeline
Official Publish:
August 1st, 2025
Last Modified:
August 1st, 2025
Added to House:
July 22nd, 2026