PT-2025-5806 · Microsoft · Windows

Taizoh Tsukamoto · Published 2025-02-06 · Updated 2025-02-06 · CVE-2025-24483

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Defense Platform Home Edition versions 3.9.51.x and earlier

Description A NULL pointer dereference issue exists, allowing an attacker to cause a denial-of-service (DoS) condition by providing specially crafted data to a specific process of the Windows system where the product is running. This can result in a Blue Screen of Death (BSOD).

Recommendations For Defense Platform Home Edition versions 3.9.51.x and earlier, consider temporarily restricting access to the specific process of the Windows system where the product is running to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-24483

Affected Products

Windows

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-24483 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24483 · Vendor Advisory
• https://t.me/cvedetector/17375 · Telegram Post
• https://hummingheads.co.jp/dep/storelist · Note
• https://t.me/cvenotify/110215 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1887424513891090474 · Twitter Post
• https://jvn.jp/en/jp/JVN66673020 · Note
• https://twitter.com/CVEnew/status/1887403111678943611 · Twitter Post