Back to search
CVE-2025-15038
Published: Mar 12, 2026
Modified: Mar 12, 2026
PUBLISHED
Description
An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to a disclosure of kernel information or a system crash. Refer to the "Security Update for ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.
| Vendor | Product | Versions |
|---|---|---|
ASUS | ASUS Business System Control Interface | affected 0 - < 0.5.14.0 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now