CVE-2025-6398

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD). Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more information.

• CWE-476

• https://www.asus.com/content/security-advisory/

Published

Aug 1, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-63952A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add…5.7
• CVE-2025-63953A Cross-Site Request Forgery (CSRF) in the /usapi?method=add…6.5
• CVE-2025-63955A Cross-Site Request Forgery (CSRF) vulnerability in the man…7.5
• CVE-2025-63958MILLENSYS Vision Tools Workspace 6.5.0.2585 exposes a sensit…9.8
• CVE-2025-6396Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2025-6397Improper Neutralization of Input During Web Page Generation …8.6
• CVE-2025-6399A vulnerability, which was classified as critical, was found…8.8
• CVE-2025-63994Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
• CVE-2025-6400A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B2019…8.8
• CVE-2025-6401A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B2019…3.5
• CVE-2025-64011Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct …4.3
• CVE-2025-64012InvoicePlane commit debb446c is vulnerable to Incorrect Acce…4.3