CVE-2025-39824

The CVE CVE-2025-39824 affects the Linux kernel HID subsystem. A crafted HID descriptor can trigger a use-after-free in hid_input handling during hidinput_connect() after hid_hw_start(), notably via ASUS HID devices (e.g., ASUS ROG N-Key keyboard). The root cause is that capability bitmaps may no...

PT-2025-33881 · Undefined · Undefined

ParsedReport CompletenessMedium 19-08-2025 The emergence of MountBot, which hides its processes https://blog.nicter.jp/2025/08/mountbot 2025aug/ Report completeness: Medium Threats: Mountbot Rapperbot Socat tool Victims: Iot devices, Online game servers, Minecraft servers, Asus wifi routers,...

Linux Distros Unpatched Vulnerability : CVE-2025-38142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors check sensor index in readstring Prevent a potential invalid memory...

Linux Distros Unpatched Vulnerability : CVE-2022-49009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors Add checks for devmkcalloc As the devmkcalloc may return NULL, the...

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to errors in the authentication process. This vulnerability allows a perpetrator to cause service interruptions.

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to errors in the authentication process. Exploiting this vulnerability could allow a malicious actor to trigger service failures through specially crafted HTTP requests...

Linux Distros Unpatched Vulnerability : CVE-2024-26683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: detect stuck ECSA element in probe resp We recently added some validation th...

hwmon: (asus-ec-sensors) check sensor index in read_string()

...

CVE-2025-6398

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...

CVE-2025-6398

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...

CVE-2025-6398

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...

CVE-2025-6398

CVE-2025-6398 affects ASUS AI Suite 3 via the IOMap64.sys driver, where a null pointer dereference can be triggered by specially crafted input, potentially causing a system crash (BSOD). The issue is local with high privileges required and user interaction not required; impact is primarily availa...

CVE-2025-6398

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...

PT-2025-31624 · Asus · Asus Ai Suite 3

Name of the Vulnerable Software and Affected Versions: ASUS AI Suite 3 affected versions not specified Description: A null pointer dereference issue exists in the IOMap64.sys driver of ASUS AI Suite 3. This can be triggered by a specially crafted input, potentially leading to a system crash Blue...

ASUS AI Suite 3 安全漏洞

ASUS AI Suite 3 is a software for monitoring and tuning the performance of computers from Asus China. A security vulnerability exists in ASUS AI Suite 3 that originates from a null pointer dereference that could cause a system crash...

CVE-2025-4569

An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services. Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information...

ASUS MyASUS 安全漏洞

ASUS MyASUS is an official ASUS PC application from Asus China Inc. A security vulnerability exists in ASUS MyASUS that stems from insecure storage of sensitive keys, which could lead to unauthorized participants obtaining a token...

ASUS MyASUS 安全漏洞

ASUS MyASUS is an official ASUS PC application from Asus China Inc. A security vulnerability exists in ASUS MyASUS that stems from insecure storage of sensitive keys, which could lead to unauthorized participants obtaining a token...

Asus and Adobe vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed two vulnerabilities each in Asus Armoury Crate and Adobe Acrobat products. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco 's third-party vulnerability...

SUSE CVE-2025-38142

In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors check sensor index in readstring Prevent a potential invalid memory access when the requested sensor is not found. findecsensorindex may return a negative value e.g. -ENOENT, but its result was used without...

AZL-64523 CVE-2025-38142 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors check sensor index in readstring Prevent a potential invalid memory access when the requested sensor is not found. findecsensorindex may return a negative value e.g. -ENOENT, but its result was used without...