← Database

CVE-2025-0285

HIGH CVSS: 7.8 Published: 2025-03-03 Modified: 2026-06-17

Description

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits.

Affected Platforms

Paragon-Software Paragon Disk WiperParagon-Software Paragon Backup \& RecoveryParagon-Software Paragon Drive CopyParagon-Software Paragon Migrate Os To SsdParagon-Software Paragon Partition ManagerParagon-Software Paragon Hard Disk Manager

Weakness Type

CWE-1284

References