CVE-2019-10709

AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS or potentially privilege escalation via a crafted DeviceIoControl call.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-09-04

Last modified

2024-08-04

Weaknesses

CWE-264

Affected products

• Precision Touchpad (Asus)

References

• http://packetstormsecurity.com/files/154259/Asus-Precision-TouchPad-11.0.0.25-Denial-Of-Service-Privilege-Escalation.ht…
• https://blog.telspace.co.za/2019/08/tsa-2019-001-asus-precision-touchpad.html