CVE-2022-4989

HighCVSS 8.5

Published: 03/07/2026(UTC)Updated: 17/07/2026(UTC)Translated: 18/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

The unsupported ASUS AI Suite 3 driver contains a vulnerability due to improper validation of specified quantity in input, allowing a local user to access unintended memory regions via crafted IOCTL requests, leading to privilege escalation.

Risk Assessment

The risk for the organization is the potential for privilege escalation by a local user, which could lead to unauthorized access to sensitive data or system compromise.

Recommendation

It is recommended to immediately uninstall the ASUS AI Suite 3 driver and refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers' section in the ASUS Security Advisory for updates or replacement with a newer driver.

Other vulnerabilities in ASUS AI Suite 3

CVE-2022-4990High
The unsupported ASUS AI Suite 3 driver contains a vulnerability due to improper validation of a specified quantity in input. A local user can bypass security validation and access restricted memory blocks via crafted IOCTL requests, leading to privilege escalation.

Original NVD description (English source)

** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to access unintended memory regions via crafted IOCTL requests, leading to privilege escalation. Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers ' section on the ASUS Security Advisory for more information.