← Database

CVE-2025-0289

HIGH CVSS: 7.8 Published: 2025-03-03 Modified: 2026-06-17

Description

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

Affected Platforms

Paragon-Software Paragon Disk WiperParagon-Software Paragon Backup \& RecoveryParagon-Software Paragon Drive CopyParagon-Software Paragon Migrate Os To SsdParagon-Software Paragon Partition ManagerParagon-Software Paragon Hard Disk Manager

Weakness Type

NVD-CWE-noinfo

References