Invalid Pointer Release Vulnerability in Armoury Crate by ASUS
CVE-2026-16005

5.8MEDIUM

Key Information:

Vendor

Asus
Status
Armoury Crate
Vendor
CVE Published:
8 September 2026

What is CVE-2026-16005?

The Armoury Crate driver contains a vulnerability that allows a local user to exploit an invalid pointer release through a specially crafted IOCTL request. This exploitation can bypass the driver's verification mechanisms, leading to potential memory corruption, data structure disruption, and in severe cases, system crashes (BSOD). Users are advised to review the ASUS Security Advisory for detailed information and mitigation steps.

Affected Version(s)

Armoury Crate 0 <= 6.5.7

References

https://www.asus.com/security-advisory

CVSS V4

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

vladimirelitokarev@gmail.com
beta_b0t@yahoo.com
geraldlim619@gmail.com
.