CVE-2021-28686
Medium
Description
AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-privileged users to achieve Denial of Service via a DeviceIoControl.
SeverityMedium
CVSS5.5
Exploit probability—
ProductAsus Gputweak Ii
PublishedApr 8, 2021
First seenApr 8, 2021
How to fix
Update
- asus gputweak_ii2.3.0.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| asus gputweak_ii | v < 2.3.0.3 | 2.3.0.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.