CVE-2022-4990

HighCVSS 7.3

Published: 03/07/2026(UTC)Updated: 17/07/2026(UTC)Translated: 18/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

The unsupported ASUS AI Suite 3 driver contains a vulnerability due to improper validation of a specified quantity in input. A local user can bypass security validation and access restricted memory blocks via crafted IOCTL requests, leading to privilege escalation.

Risk Assessment

The risk involves potential privilege escalation by a local user, which could allow them to take control of the system or access sensitive data.

Recommendation

It is recommended to immediately uninstall the ASUS AI Suite 3 driver and refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers' section in the ASUS Security Advisory for update information.

Other vulnerabilities in ASUS AI Suite 3

CVE-2022-4989High
The unsupported ASUS AI Suite 3 driver contains a vulnerability due to improper validation of specified quantity in input, allowing a local user to access unintended memory regions via crafted IOCTL requests, leading to privilege escalation.

Original NVD description (English source)

** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to bypass security validation and access restricted memory blocks via crafted IOCTL requests, leading to privilege escalation. Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers ' section on the ASUS Security Advisory for more information.