PT-2025-16362 · Openrazer+1 · Openrazer+1

Diraltvein · Published 2025-04-15 · Updated 2025-04-24 · CVE-2025-32776

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenRazer versions prior to 3.10.2

Description The issue allows an attacker to cause the custom kernel driver to read more bytes than provided by user space by writing specially crafted data to the matrix custom frame file. This data will be written into the RGB arguments which will be sent to the USB device.

Recommendations For versions prior to 3.10.2, update to version 3.10.2 to resolve the issue. As a temporary workaround, consider restricting access to the matrix custom frame file to minimize the risk of exploitation.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-32776

DLA-4136-1

GHSA-835J-6976-46JX

Affected Products

Debian

Openrazer

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32776.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-32776 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-32776 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-32776 · Security Note
• https://ubuntu.com/security/CVE-2025-32776 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4136-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-32776 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32776 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-32776 · Vendor Advisory
• https://github.com/openrazer/openrazer/commit/57610511d2548eda66999eaed5aa4517e89d6d39 · Note
• https://github.com/openrazer/openrazer/security/advisories/GHSA-835j-6976-46jx · Note
• https://github.com/openrazer/openrazer/issues/2433 · Note
• https://github.com/openrazer/openrazer/commit/d869abd20995b4931795e1cde54d4ac84d9ca62f · Note
• https://twitter.com/CVEnew/status/1912187846036697188 · Twitter Post
• https://t.me/cvetracker/21654 · Telegram Post