Vulnerability · Published Apr 8, 2021 · Assigned by mitre
CVE-2021-28686
Medium 5.5
In plain English
A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.3%top 82.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-privileged users to achieve Denial of Service via a DeviceIoControl.
Affected products (as reported)
References
- https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/ x_refsource_MISC
- https://gist.github.com/DStraghkov/fba4994ac4bb3a6e2940b21743563df0 x_refsource_MISC