Double Free Vulnerability in ASUS System Analysis Service
CVE-2025-2027

5.9MEDIUM

Key Information:

Vendor

Asus
Status
Asci
Vendor
CVE Published:
28 March 2025
đź”” Create Asus Vulnerability Alert

What is CVE-2025-2027?

A double free vulnerability has been discovered in the ASUS System Analysis service, enabling attackers to exploit specially crafted local RPC requests. This could lead to service crashes and, in rare cases, memory manipulation, posing significant risks to system stability and security. For comprehensive mitigation details, refer to the ASUS Security Advisory.

Affected Version(s)

ASCI before 1.1.32.0

ASCI before 3.1.43.0

ASCI before 3.2.44.0

References

https://www.asus.com/content/asus-product-security-advisory/
vendor-advisory

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-2027 : Double Free Vulnerability in ASUS System Analysis Service