This vulnerability in ASUS Armoury Crate involves incorrect permission assignment on a critical resource, enabling a local user to circumvent the driver's validation checks. This leads to unauthorized read and write access to physical memory, potentially compromising system integrity. The CVSS 4.0 base score is 7.3 (high), reflecting local attack vector, high attack complexity, and significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been provided by ASUS as of the publication date.

A local attacker with limited privileges can bypass Armoury Crate's driver validation mechanism, gaining unauthorized read and write access to physical memory. This could allow manipulation of sensitive data or system components, potentially leading to system compromise or data corruption. The vulnerability does not require user interaction but does require local access and has a high attack complexity.

Patch status is not yet confirmed — check the ASUS Security Advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for any unusual activity related to Armoury Crate. Avoid granting unnecessary local privileges that could be leveraged to exploit this vulnerability.