← Database

CVE-2025-0287

MEDIUM CVSS: 5.1 Published: 2025-03-03 Modified: 2026-06-17

Description

Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.

Affected Platforms

Paragon-Software Paragon Disk WiperParagon-Software Paragon Backup \& RecoveryParagon-Software Paragon Drive CopyParagon-Software Paragon Migrate Os To SsdParagon-Software Paragon Partition ManagerParagon-Software Paragon Hard Disk Manager

Weakness Type

CWE-476

References