CVE-2026-8917: ASUS GPU Tweak III, грешка в паметта

Описание

Оригинално описание

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the '  Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin   ' section on the ASUS Security Advisory for more information.

Засегнати продукти

• ASUS GPU Tweak III: through V2.1.1.7
• ASUS GPUTweakII: through V2.4.0.0
• ASUS AI Suite3: through V2.1.2.0
• ASUS VGAdll: through V0.0.7.8

Вид слабост

• CWE-822 Untrusted Pointer Dereference

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-8917
• https://nvd.nist.gov/vuln/detail/CVE-2026-8917
• https://www.asus.com/security-advisory