Description
Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Paragon Software Migrate OS to SSD
4 to ≤ 5affected
Paragon Software Disk Wiper
15 to ≤ 16affected
Paragon Software Drive Copy
15 to ≤ 16affected
Paragon Software Backup and Recovery
15 to ≤ 17.39affected
Paragon Software Hard Disk Manager
15 to ≤ 17.39affected
Paragon Software Partition Manager
15 to ≤ 17.39affected