A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by bypassing the validation mechanism.Refer to the '
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.asus.com/security-advisory |
|
History
Mon, 22 Jun 2026 04:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Arbitrary Memory Access via Permissive Input Validation in ASUS Armoury Crate |
Mon, 22 Jun 2026 03:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by bypassing the validation mechanism.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information. | |
| First Time appeared |
Asus
Asus armoury Crate |
|
| Weaknesses | CWE-183 | |
| CPEs | cpe:2.3:a:asus:armoury_crate:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Asus
Asus armoury Crate |
|
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: ASUS
Published:
Updated: 2026-06-22T02:00:12.252Z
Reserved: 2026-05-19T05:57:37.797Z
Link: CVE-2026-8918
No data.
No data.
No data.
OpenCVE Enrichment
Updated: 2026-06-22T04:30:16Z
Weaknesses