Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O…
Impact
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.
Source excerpt · ASUSAffected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
ASUS · motherboards firmware
Other versions: unaffected
| Version / range | Source status |
|---|---|
| A520/B550 series Before 3644 4304 | affected |
| X570 Series Before 5054 | affected |
| A620/A620A Series Before 4003 4004 | affected |
| B650 Series Before 1303 4003 4004 | affected |
| X670 Series Before 4003 4004 | affected |
| B840 Series Before 1804 | affected |
| B850 Series Before 1103 1804 2503 | affected |
| X870 Series Before 1804 2503 | affected |
| X870E Series Before 1103 2503 | affected |
| Knoll Series Before 4003 | affected |
| TRX50 Series Before 0703 1403 | affected |
| W790 Series Before 2101 | affected |
| WRX90 Series Before 1403 | affected |
Original source description
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.