CVE-2025-9337 | ASUS Armoury Crate up to 6.3.2 AsIO3.sys null pointer dereference

A vulnerability marked as problematic has been reported in ASUS Armoury Crate up to 6.3.2. The impacted element is an unknown function in the library AsIO3.sys. The manipulation leads to null pointer dereference.

This vulnerability is referenced as CVE-2025-9337. The attack can only be performed from a local environment. No exploit is available.

It is suggested to upgrade the affected component.