CVE-2025-2027mediumCWE-415

CVE-2025-2027: medium-severity vulnerability in ASUS ASCI

Published

Follow this CVE+ Monitor ASCI

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.2%
A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in some rare circumstances. Refer to the 'Security Update for MyASUS' section on the ASUS Security Advisory for more information.
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
Affected products
ASUS · ASCI
Related CVEs — ASUS ASCI

In the same product, most dangerous first.

CVE-2024-55408MEDIUMCVE-2024-55408EPSS 0.2%CVE-2025-12793HIGHCVE-2025-12793EPSS 0.1%