Skip to content
OpenAdvisories
High · 8.5 CVE-2026-112116 EUVD-2026-116689GHSA-4x42-7325-2pc4

An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write ar…

Published Nov 4, 2026 · Updated Nov 4, 2026 · Assigned by ASUS

Description

An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system.
Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS System Control Interface 3.1.66.0 – ≤ 3.1.69.0 —

References