CVE-2025-2027
ASUS System Analysis - Use After Free
Title source: llmDescription
A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash and potentially memory manipulation in some rare circumstances. Refer to the 'Security Update for MyASUS' section on the ASUS Security Advisory for more information.
Scores
EPSS
0.0011
EPSS Percentile
29.6%
Classification
CWE
CWE-415
Status
draft
Timeline
Published
Mar 28, 2025
Tracked Since
Feb 18, 2026