ASUS Ai Suite vulnerabilities

2 CVEs affecting ASUS Ai Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-6398, published 2025-08-01.

More from ASUS.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-33220, published 2024-05-22. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
• CVE-2025-6398, published 2025-08-01. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD).…