CVE-2025-2027

ASUS / ASCI PUBLISHED

Description (CNA)

A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in some rare circumstances. Refer to the 'Security Update for MyASUS' section on the ASUS Security Advisory for more information.

Affected (CNA)

Vendor / product	Versions
ASUS / ASCI	affected before 1.1.32.0; affected before 3.1.43.0; affected before 3.2.44.0

CWE

CWE-415

References

https://www.asus.com/content/asus-product-security-advisory/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.