CVE-2026-3508 is an out-of-bounds read vulnerability in the IOCTL handler of the ASUS System Control Interface. It allows a local user to cause a system crash (Blue Screen of Death) by triggering a read operation that exceeds the buffer size. The vulnerability has a medium severity score of 6.8. No specific affected versions or patch information is provided in the available data.