CVE-2026-3508

MediumCVSS 6.8/10Last modified Sep 17, 2026

Description

An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system crash (BSOD) via a read size that exceeds the buffer size.Refer to the ' Security Update for MyASUS ' section on the ASUS Security Advisory for more information.

Metrics

CVSS 4.0 6.8/10

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: May 8, 2026
Last modified: Sep 17, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-350808.1The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of u CVE-2026-350818.1The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user CVE-2026-350828.8The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-CVE-2026-350838.8A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.CVE-2026-350848.8A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.CVE-2026-350858.8A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.CVE-2026-350866.5Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache OFBiz. This issue affects Apache OFBiz:CVE-2026-350879.3Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials b CVE-2026-350888.2Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker CVE-2026-350898.7In Slican telephone exchanges secure key is generated in a predictable manner using properties of the telephone exchange which can be obtain CVE-2026-35097.5An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control ru CVE-2026-350909.3In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via