PT-2025-44190 · Unknown · Gamedriverx64.Sys

Published 2025-10-28 · Updated 2026-02-09 · CVE-2025-61155

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GameDriverX64.sys versions 7.23.4.7 and earlier

Description The GameDriverX64.sys kernel-mode anti-cheat driver contains an access control issue in one of its IOCTL handlers. A user-mode process can send specially crafted IOCTL requests to the driver. These requests are executed in kernel-mode without proper authentication or access validation, potentially allowing an attacker to terminate arbitrary processes, including critical system and security services, without administrative privileges. The affected driver is signed. The vulnerability allows for a local denial of service by crashing arbitrary processes. The vulnerable component utilizes functions such as IoCreateDevice, IoCreateSymbolicLink, and ZwTerminateProcess. The API endpoint used for exploitation involves sending IOCTL requests to the driver. The vulnerable parameter is the crafted IOCTL request itself.

Recommendations Versions prior to 7.23.4.7 should be updated.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2025-61155

Affected Products

Gamedriverx64.Sys

References · 11

• 🔥 https://github.com/pollotherunner/CVE-2025-61155 · Exploit
• 🔥 https://github.com/pollotherunner/CVE-2025-61155/blob/main/advisory.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-61155 · Security Note
• https://twitter.com/CVEnew/status/1983214813242372158 · Twitter Post
• https://t.me/aptreports/25522 · Telegram Post
• http://gamedriverx64sys.com · Note
• https://twitter.com/piedpiper1616/status/2020705403039080541 · Twitter Post
• https://hotta.com.tw · Note
• https://t.me/CVEtracker/35980 · Telegram Post
• https://t.me/cveNotify/140833 · Telegram Post
• http://hotta.com · Note