Description
Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Paragon Software Migrate OS to SSD
4 to ≤ 5affected
Paragon Software Disk Wiper
15 to ≤ 16affected
Paragon Software Drive Copy
15 to ≤ 16affected
Paragon Software Backup and Recovery
15 to ≤ 17.39affected
Paragon Software Hard Disk Manager
15 to ≤ 17.39affected
Paragon Software Partition Manager
15 to ≤ 17.39affected