CVE-2026-8917

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the '  Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin   ' section on the ASUS Security Advisory for more information.

Score

CVSS 4.0 8.4 High

Status

Deferred - 54bf65a7-a193-42d2-b1ba-8e150d3c35e1

Published

2026-08-11

Last modified

2026-09-17

Weaknesses

CWE-822

Affected products

• Ai Suite3 (Asus)
• Gpu Tweak Iii (Asus)
• Gputweakii (Asus)
• Vgadll (Asus)

References

• https://www.asus.com/security-advisory