Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-15038 EUVD-2025-208609GHSA-6rfh-4m76-4764

An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an …

Published Mar 12, 2026 · Updated Mar 12, 2026 · Assigned by ASUS

Description

An Out-of-Bounds
Read vulnerability exists in the ASUS Business System
Control Interface driver. This vulnerability can be triggered by an unprivileged local user
sending a specially crafted IOCTL  request, potentially leading
to a disclosure of
kernel information or a system crash. Refer to the "Security Update for ASUS 
Business System Control Interface" section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS ASUS Business System Control Interface < 0.5.14.0 0.5.14.0

References