AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-privileged users to achieve Denial of Service via a DeviceIoControl.
References
Link | Resource |
---|---|
https://gist.github.com/DStraghkov/fba4994ac4bb3a6e2940b21743563df0 | Third Party Advisory |
https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/ | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-04-08T10:19:42
Updated: 2021-04-08T10:19:42
Reserved: 2021-03-18T00:00:00
Link: CVE-2021-28686
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-04-08T11:15:12.883
Modified: 2021-04-16T20:34:24.030
Link: CVE-2021-28686
JSON object: View
Redhat Information
No data.
CWE