CVE-2021-28686

AsIO264.sys and AsIO232.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-privileged users to achieve Denial of Service via a DeviceIoControl...

CVE-2021-28686

The affected software is ASUS GPUTweak II (pre-2.3.0.3). The issue is a stack-based buffer overflow in AsIO2_64.sys and AsIO2_32.sys that can be triggered by a low-privilege user via DeviceIoControl, potentially causing Denial of Service. Public technical details are limited across the connected ...