CVE-2025-9337: Null Pointer Dereference
A null pointer dereference has been identified in the AsIO3.sys driver. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD). Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9337?
CVE-2025-9337 is classified as a critical vulnerability due to its potential to cause system crashes.
How do I fix CVE-2025-9337?
To mitigate CVE-2025-9337, update the ASUS Armoury Crate App to the latest version as specified in the security advisories.
What does a null pointer dereference in CVE-2025-9337 imply?
A null pointer dereference in CVE-2025-9337 implies that an unexpected null value can cause the system to crash (BSOD) when processed.
Which systems are affected by CVE-2025-9337?
CVE-2025-9337 primarily affects systems using the ASUS Armoury Crate App with the AsIO3.sys driver.
Can CVE-2025-9337 be exploited remotely?
CVE-2025-9337 requires local access to trigger the vulnerability, as it must be activated via specially crafted input.