CVE-2026-88781: ASUS motherboards firmware, грешка в паметта

Описание

Оригинално описание

Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.

Засегнати продукти

• ASUS motherboards firmware: A520/B550 series Before 3644 4304; X570 Series Before 5054; A620/A620A Series Before 4003 4004; B650 Series Before 1303 4003 4004; X670 Series Before 4003 4004; B840 Series Before 1804; B850 Series Before 1103 1804 2503; X870 Series Before 1804 2503; X870E Series Before 1103 2503; Knoll Series Before 4003; TRX50 Series Before 0703 1403; W790 Series Before 2101; WRX90 Series Before 1403

Вид слабост

• CWE-822 Untrusted Pointer Dereference

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-88781
• https://nvd.nist.gov/vuln/detail/CVE-2026-88781
• https://www.asus.com/security-advisory