Out-of-bounds Read in ASUS System Control Interface

CVE-2026-3508

What is CVE-2026-3508?

An Out-of-bounds Read vulnerability exists within the IOCTL handler of the ASUS System Control Interface, which enables a local user to manipulate the read size, potentially exceeding the allocated buffer size. This issue may lead to system instability, resulting in a Blue Screen of Death (BSOD). Users are advised to review the latest security updates provided in the ASUS Security Advisory for remediation actions.

References