PT-2025-9247 · Paragon · Paragon Partition Manager

Published 2025-02-28 · Updated 2025-04-15 · CVE-2025-0285

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Paragon Partition Manager version 7.9.1

Description The issue is caused by a failure to properly validate the length of user-supplied data, leading to an arbitrary kernel memory mapping vulnerability within the biontdrv.sys component. This can allow an attacker to perform privilege escalation exploits.

Recommendations For Paragon Partition Manager version 7.9.1, consider disabling the biontdrv.sys component until a patch is available to prevent potential privilege escalation exploits.

Fix

DoS

LPE

RCE

Buffer Overflow

Weakness Enumeration

CWE-20

CWE-1284

CWE-119

Related Identifiers

BDU:2025-02230

CVE-2025-0285

Affected Products

Paragon Partition Manager

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2025-0285 · Security Note
• https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-0285 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02230 · Security Note
• https://cybersecurity-help.cz/vdb/SB2025022879 · Note
• https://paragon-software.com/support/#patches · Note
• https://twitter.com/gothburz/status/1896289880935743741 · Twitter Post
• https://t.me/cvenotify/113556 · Telegram Post
• https://twitter.com/cybercronai/status/1896958985158205711 · Twitter Post
• https://t.me/cvenotify/113372 · Telegram Post
• https://t.me/true_secator/6798 · Telegram Post
• https://twitter.com/CVEnew/status/1896767604406026285 · Twitter Post
• https://t.me/cvenotify/113184 · Telegram Post
• https://t.me/cvedetector/19383 · Telegram Post
• https://kb.cert.org/vuls/id/726882 · Note