BaseFortify

Publication date: 2025-10-13

Last updated on: 2025-10-14

Assigner: ASUS

Description

A null pointer dereference has been identified in the AsIO3.sys driver. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD). Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-13

Last Modified

2025-10-14

Generated

2026-07-06

AI Q&A

2025-10-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-9337

Affected Vendors & Products

Vendor	Product	Version / Range
asus	armoury_crate_app	4.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a null pointer dereference in the AsIO3.sys driver. It can be triggered by specially crafted input, which may cause the system to crash and display a Blue Screen of Death (BSOD).

Impact Analysis

The vulnerability can lead to a system crash (BSOD), which may cause denial of service by making the affected system unstable or unusable until it is restarted or repaired.

Hi! I’m here to help you understand CVE-2025-9337. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70