CVE-2025-9336

MediumCVSS 6.8

Published: 13/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

3th percentile - higher than 3% of all known CVEs

Summary

A stack buffer overflow has been identified in the AsIO3.sys driver. The vulnerability can be triggered by input manipulation, potentially leading to a system crash (BSOD) or other undefined execution.

Risk Assessment

An attacker could cause a system crash or potentially execute arbitrary code, leading to system compromise.

Recommendation

Apply the security update for Armoury Crate App as per the ASUS Security Advisory.

Other vulnerabilities in AsIO3.sys

CVE-2025-9337Medium
A null pointer dereference has been identified in the AsIO3.sys driver. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD).

Original NVD description (English source)

A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may leading to a system crash (BSOD) or other potentially undefined execution. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS