CVE-2025-11775 — ASUS / Armoury Crate

CVE-2025-11775

ASUS / Armoury Crate PUBLISHED

Description (CNA)

An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by sending specially crafted requests, which may lead to a service crash or partial loss of functionality. This vulnerability only affects ASUS motherboard series products. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

Affected (CNA)

Vendor / product	Versions
ASUS / Armoury Crate	affected v6.3.4 and earlier

CWE

CWE-125

References

https://www.asus.com/security-advisory

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.