CVE-2025-59374

The CVE-2025-59374 entry describes a supply-chain compromise in ASUS Live Update, where unauthorized modifications were distributed in several historical builds. Affected versions include ASUS Live Update prior to 3.6.8 and versions 3.6.8–3.6.15, with End-of-Support reached in October 2021. The v...

CVE-2025-59374

"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. Only devices that...

CVE-2025-59374

"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. Only devices that...

CVE-2025-11775

An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by sending specially crafted requests, which may lead to a service crash or partial loss of functionality. This vulnerability only affects ASUS motherboard series products. Refer t...

CVE-2025-11775

CVE-2025-11775 involves an out-of-bounds read in the asComSvc service used by ASUS Armoury Crate on ASUS motherboard series. The issue can be triggered by specially crafted requests and may cause a service crash or partial loss of functionality. Affected component: asComSvc within Armoury Crate e...

EUVD-2025-203873

An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by sending specially crafted requests, which may lead to a service crash or partial loss of functionality. This vulnerability only affects ASUS motherboard series products. Refer t...

CVE-2025-11775

An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by sending specially crafted requests, which may lead to a service crash or partial loss of functionality. This vulnerability only affects ASUS motherboard series products. Refer t...

CVE-2025-11901

An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. Exploitation requires physical access to internal expansion slots to install a specially crafted device an...

CVE-2025-11901

An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. Exploitation requires physical access to internal expansion slots to install a specially crafted device an...

EUVD-2025-203874

An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. Exploitation requires physical access to internal expansion slots to install a specially crafted device an...

CVE-2025-11901

CVE-2025-11901 concerns an uncontrolled resource consumption vulnerability allowing pre-boot DMA access on ASUS motherboards (chipsets B460/B560/B660/B760/H410/H510/H610/H470/Z590/Z690/Z790/W480/W680). Root cause: DMA protection appears active in firmware but IOMMU is not correctly initialized du...

PT-2025-51808

An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by sending specially crafted requests, which may lead to a service crash or partial loss of functionality. This vulnerability only affects ASUS motherboard series products. Refer t...

PT-2025-51809

Name of the Vulnerable Software and Affected Versions ASUS Motherboards with Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets Description An uncontrolled resource consumption issue affects certain ASUS motherboards utilizing Intel B460, B560, B660...

VulnCheck KEV: CVE-2025-59374

"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. Only devices that...

PT-2025-51813

Name of the Vulnerable Software and Affected Versions ASUS Live Update versions prior to 3.6.8 ASUS Live Update versions 3.6.8 through 3.6.15 ASUS Live Update versions prior to October 2021 Description Certain versions of the ASUS Live Update client were distributed with unauthorized modification...

ASUS Live Update 安全漏洞

ASUS Live Update is an automated driver and firmware update tool from Asus China. A security vulnerability exists in ASUS Live Update, which stems from a supply chain attack that results in a tampered version, which could cause the device to perform unintended operations...

ASUS Motherboards 安全漏洞

ASUS Motherboards is a series of motherboards from the Chinese company Asus ASUS. A security vulnerability exists in ASUS Motherboards that stems from Physical access to the internal expansion slots for installation of specially crafted devices and software tools may result in uncontrolled resour...

ASUS Armoury Crate 安全漏洞

ASUS Armoury Crate is a software utility from the Chinese company Asus ASUS. It is designed to provide centralized control over supported ROG gaming products. A security vulnerability exists in ASUS Armoury Crate, which stems from the fact that sending a specially crafted request could trigger an...

ASUS Live Update Embedded Malicious Code Vulnerability

ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted produc...

The vulnerability of the hid-asus.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the hid-asus.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...