Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-0285

CVE-2025-0285

Description

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Paragon Software Migrate OS to SSD

  • 4 to ≤ 5affected

Paragon Software Disk Wiper

  • 15 to ≤ 16affected

Paragon Software Paragon Drive Copy

  • 15 to ≤ 16affected

Paragon Software Backup and Recovery

  • 15 to ≤ 17.39affected

Paragon Software Hard Disk Manager

  • 15 to ≤ 17.39affected

Paragon Software Partition Manager

  • 15 to ≤ 17.39affected

References