Privilege Escalation Vulnerability in ASUS AI Suite 3 Driver
CVE-2022-4989

8.5HIGH

Key Information:

Vendor

Asus
Status
Ai Suite 3
Vendor
CVE Published:
3 July 2026

What is CVE-2022-4989?

The ASUS AI Suite 3 driver contains an improper validation vulnerability in its handling of specified quantities in input. This weakness enables local users to send crafted IOCTL requests, potentially allowing them to access unintended regions of memory. Such exploitation can lead to unauthorized privilege escalation, compromising system security.

Affected Version(s)

AI Suite 3 0

References

https://www.asus.com/security-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.