CVE-2026-16004

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification. Refer to the ' Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

Score

CVSS 4.0 5.9 Medium

Status

Deferred - 54bf65a7-a193-42d2-b1ba-8e150d3c35e1

Published

2026-09-08

Last modified

2026-09-17

Weaknesses

CWE-782

Affected products

• Armoury Crate (Asus)

References

• https://www.asus.com/security-advisory