Skip to content
OpenAdvisories
Medium · 5.8 CVE-2026-16005 EUVD-2026-72622GHSA-rfhm-hwp6-xrr6

Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by…

Published Sep 8, 2026 · Updated Sep 17, 2026 · Assigned by ASUS

Description

Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification, which can corrupt data structures and cause a system crash (BSOD).Refer to the '
Security Update for Armoury Crate App  ' section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS Armoury Crate through 6.5.7 —

References