Vulnerability Details CVE-2025-0285
Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.5%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2025-0285
-
cpe:2.3:a:paragon-software:paragon_backup_&_recovery:*
-
cpe:2.3:a:paragon-software:paragon_disk_wiper:*
-
cpe:2.3:a:paragon-software:paragon_drive_copy:*
-
cpe:2.3:a:paragon-software:paragon_hard_disk_manager:*
-
cpe:2.3:a:paragon-software:paragon_migrate_os_to_ssd:*
-
cpe:2.3:a:paragon-software:paragon_partition_manager:*