This vulnerability (CWE-770) in ASUS Armoury Crate allows a local attacker with low privileges to bypass driver authentication and allocate an unrestricted amount of system memory. This leads to resource exhaustion and a denial-of-service condition. The CVSS 4.0 base score is 5.7, reflecting medium severity with local attack vector, high attack complexity, and high impact on availability. No known exploits are reported in the wild. The vendor has not published a patch or remediation level at this time.

A local user can cause denial-of-service by exhausting system memory through unrestricted allocation. This impacts system availability but does not affect confidentiality or integrity. The attack requires local access and has high complexity, limiting ease of exploitation.

Patch status is not yet confirmed — check the ASUS Security Advisory for current remediation guidance. Until a fix is available, limit local user access and monitor for unusual memory consumption related to Armoury Crate processes.