CVE-2026-16005: Medium severity ASUS Armoury Crate driver vulnerability
Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification, which can corrupt data structures and cause a system crash (BSOD).Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A local user can exploit the issue. The described attack requires sending a crafted IOCTL request to the Armoury Crate driver.
What is the likely impact of successful exploitation?
Successful exploitation can free arbitrary memory by bypassing the driver's verification. This can corrupt data structures and cause a system crash (BSOD).
What should administrators do to remediate the issue?
Review the ASUS Security Advisory and apply the security update identified in its “Security Update for Armoury Crate App” section.