CVE-2025-9337

MediumCVSS 6.8

Published: 13/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

A null pointer dereference has been identified in the AsIO3.sys driver. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD).

Risk Assessment

The risk is that an attacker could cause a system crash (BSOD), disrupting services and causing system unavailability.

Recommendation

Apply the security update provided by ASUS in the 'Security Update for Armoury Crate App' section.

Other vulnerabilities in AsIO3.sys

CVE-2025-9336Medium
A stack buffer overflow has been identified in the AsIO3.sys driver. The vulnerability can be triggered by input manipulation, potentially leading to a system crash (BSOD) or other undefined execution.

Original NVD description (English source)

A null pointer dereference has been identified in the AsIO3.sys driver. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD). Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS