CVE-2025-11775
Unknown
Unknown - Not Provided
Out-of-Bounds Read in ASUS asComSvc Causes Service Crash
Publication date: 2025-12-17
Last updated on: 2025-12-17
Assigner: ASUS
Description
Description
An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by sending specially crafted requests, which may lead to a service crash or partial loss of functionality. This vulnerability only affects ASUS motherboard series products. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| asus | armoury_crate_app | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out-of-bounds read in the asComSvc service of ASUS motherboard series products. It can be triggered by sending specially crafted requests, potentially causing the service to crash or lose some functionality.
How can this vulnerability impact me? :
The vulnerability may lead to a service crash or partial loss of functionality in affected ASUS motherboard series products, which could disrupt normal operations or system stability.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70