CVE-2026-16004 — ASUS / Armoury Crate

CVE-2026-16004

ASUS / Armoury Crate PUBLISHED

Description (CNA)

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification. Refer to the ' Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

Affected (CNA)

Vendor / product	Versions
ASUS / Armoury Crate	affected through 6.5.7

CWE

CWE-782

References

https://www.asus.com/security-advisory

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.