Back to Database
Status published
High
CVE-2025-9338
A improper restriction of operations within the bounds of a...
Vulnerability Description
A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerability can be triggered by manually executing a specially crafted process, potentially leading to local privilage escalation. For additional information, please refer to the 'Security Update for Armoury Crate App' section of the ASUS Security Advisory.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-9338
Credits & Attribution
No credits recorded in the NVD database.
References
More from ASUS
View All →CVE-2025-9968
A link following vulnerability exists in the UnifyScanner component of...
High
8.5
CVE-2025-9337
A null pointer dereference has been identified in the AsIO3.sys...
Medium
6.8
CVE-2025-9336
A stack buffer overflow has been identified in the AsIO3.sys...
Medium
6.8
CVE-2025-6398
A null pointer dereference vulnerability exists in the IOMap64.sys driver...
Medium
6.7
CVE-2025-59374
"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client...
Critical
9.3
Affected Vendor
ASUS
View all reports →Affected Software
Armoury Crate
Vulnerable Versions:
6.2.11 and earlier
Timeline
Official Publish:
November 6th, 2025
Last Modified:
November 6th, 2025
Added to House:
July 22nd, 2026