Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2025-0286

CVE-2025-0286

Description

Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Paragon Software Partition Manager

  • 15 to ≤ 17.39affected

Paragon Software Hard Disk Manager

  • 15 to ≤ 17.39affected

Paragon Software Backup and Recovery

  • 15 to ≤ 17.39affected

Paragon Software Drive Copy

  • 15 to ≤ 16affected

Paragon Software Disk Wiper

  • 15 to ≤ 16affected

Paragon Software Migrate OS to SSD

  • 4 to ≤ 5affected

References