CVE-2026-75808: CWE-770 — Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate

This vulnerability in ASUS Armoury Crate involves allocation of resources without limits or throttling (CWE-770). A local attacker can bypass driver authentication and allocate an unrestricted amount of memory, causing system memory exhaustion and resulting in a denial-of-service condition. The CVSS 4.0 base score is 5.7, reflecting medium severity with local attack vector, high attack complexity, and high impact on availability. No known exploits are reported in the wild. The vendor advisory references a security update but no explicit patch or remediation details are provided in the input data.

Successful exploitation results in denial-of-service due to system memory exhaustion. This impacts system availability but does not affect confidentiality or integrity. The attack requires local access with low privileges and no user interaction.

Patch status is not yet confirmed — check the ASUS Security Advisory for current remediation guidance. Until a patch is available, restrict local access to trusted users and monitor for unusual memory usage patterns. No official fix details are provided in the input data.