High severity · published May 12, 2025
CVE-2025-1533
A stack buffer overflow has been identified in the AsIO3.sys driver
8.2
CVSS
0.3%
EPSS
No
On KEV
Description
A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may leading to a system crash (BSOD) or other potentially undefined execution.
Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Armoury Crate · ASUS
V6.1.13 and earlier · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-1533
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-1533
www.asus.com
https://www.asus.com/content/asus-product-security-advisory/
www.talosintelligence.com
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2144
More from Armoury Crate
9.8
CVE-2023-5716
ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HTTP requests without permission
8.5
CVE-2026-102438
An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link…
8.5
CVE-2025-9968
A link following vulnerability exists in the UnifyScanner component of Armoury Crate
8.4
CVE-2025-3464
A race condition vulnerability exists in Armoury Crate
8.4
CVE-2024-12957
A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion