CVE-2025-15038

Name of the Vulnerable Software and Affected Versions ASUS Business System Control Interface driver (affected versions not specified)

Description An Out-of-Bounds Read issue exists in the ASUS Business System Control Interface driver. This issue can be triggered by a local user without elevated privileges sending a specially crafted IOCTL request. Successful exploitation could lead to the disclosure of kernel information or a system crash. The vulnerability is triggered by sending a specially crafted IOCTL request to the driver. The ioctl function is involved in the vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.