SB2025062010 - Multiple vulnerabilities in Asus Armoury Crate

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Stack-based buffer overflow (CVE-ID: CVE-2025-1533)

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the AsIO3.sys kernel driver. A local user can use a specially crafted I/O request packet (IRP), trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

2) Improper Authorization (CVE-ID: CVE-2025-3464)

The vulnerability allows a local user to bypass authorization checks.

The vulnerability exists due to improper authorization in the AsIO3.sys functionality. A local user can use a specially crafted hard link and bypass authorization on the target system.

Remediation

Install update from vendor's website.

References

• https://www.asus.com/content/asus-product-security-advisory/
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2144
• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2150
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2150