CVE-2026-75809 | BDVDB-2026-369999 Detail
ASUSArmoury Crate
Description#
Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Impact#
Per CVSS v4.0: confidentiality impact low, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-782 Exposed IOCTL with Insufficient Access Control
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.