CVE-2021-28685

ASUS GPUTweak II before 2.3.0.3 is affected by CVE-2021-28685 via AsIO2_64.sys and AsIO2_32.sys. The driver routines allow low-privileged users to map physical memory into the process’s virtual address space and to interact with MSR registers, enabling exploitation to obtain NT AUTHORITY\SYSTEM p...

CVE-2021-28686

The affected software is ASUS GPUTweak II (pre-2.3.0.3). The issue is a stack-based buffer overflow in AsIO2_64.sys and AsIO2_32.sys that can be triggered by a low-privilege user via DeviceIoControl, potentially causing Denial of Service. Public technical details are limited across the connected ...