Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-0289

CVE-2025-0289

Description

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Paragon Software Migrate OS to SSD

  • 4 to ≤ 5affected

Paragon Software Disk Wiper

  • 15 to ≤ 16affected

Paragon Software Drive Copy

  • 15 to ≤ 16affected

Paragon Software Hard Disk Manager

  • 15 to ≤ 17.39affected

Paragon Software Backup and Recovery

  • 15 to ≤ 17.39affected

Paragon Software Partition Manager

  • 15 to ≤ 17.39affected

References