PT-2025-23189 · Techpowerup · Gpu-Z

Aiyakami · Published 2025-05-29 · Updated 2025-05-29 · CVE-2025-5324

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Low

Base vector

AV:L/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TechPowerUp GPU-Z version 2.23.0

Description A problematic issue was found in the function sub 140001880 within the GPU-Z.sys library, affecting the 0x8000645C IOCTL Handler component. This issue leads to a memory leak. The attack can be launched locally.

Recommendations For version 2.23.0, as a temporary workaround, consider disabling the sub 140001880 function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-404

CWE-401

Related Identifiers

CVE-2025-5324

Affected Products

Gpu-Z

References · 8

• 🔥 https://github.com/Aiyakami/CVE-1/issues/3 · Exploit
• 🔥 https://github.com/Aiyakami/CVE-1/tree/main/test1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-5324 · Security Note
• https://t.me/cvetracker/24924 · Telegram Post
• https://twitter.com/CVEnew/status/1928167575906660446 · Twitter Post
• https://vuldb.com/?id.310494 · Note
• https://vuldb.com/?submit.580513 · Note
• https://vuldb.com/?ctiid.310494 · Note