CVE-2024-30804

The AsInsHelp64.sys driver, part of the ASUS Fan Xpert software (versions prior to v.10013), contains a vulnerability that allows an attacker to execute arbitrary code via crafted IOCTL requests. The root cause is an exposed IOCTL that allows unprivileged users to map arbitrary physical memory in...