Riskcovery

CVE-2025-0286

CVE-2025-0286

State
Published
Severity
8.4 High
Published
Mar 3, 2025
Updated
Sep 9, 2025
Reserved
Jan 6, 2025

Read the record on cve.org

Description

Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine.

Scores

CVSSScoreVectorSource
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Partition ManagerParagon Software
  • 15 through 17.39Affected
Hard Disk ManagerParagon Software
  • 15 through 17.39Affected
Backup and RecoveryParagon Software
  • 15 through 17.39Affected
Drive CopyParagon Software
  • 15 through 16Affected
Disk WiperParagon Software
  • 15 through 16Affected
Migrate OS to SSDParagon Software
  • 4 through 5Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.