Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-16004 EUVD-2026-72623GHSA-q5wh-2fvv-q79q

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configurati…

Published Sep 8, 2026 · Updated Sep 17, 2026 · Assigned by ASUS

Description

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification.
Refer to the '
Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS Armoury Crate through 6.5.7 —

References