PT-2025-9248 · Paragon · Paragon Partition Manager

Published 2025-02-28 · Updated 2025-03-04 · CVE-2025-0286

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Paragon Partition Manager version 7.9.1

Description The issue is caused by a failure to properly validate the length of user-supplied data, which can allow an attacker to execute arbitrary code on the victim machine. This is due to an arbitrary kernel memory write vulnerability within the biontdrv.sys component.

Recommendations For Paragon Partition Manager version 7.9.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

CWE-1284

Related Identifiers

BDU:2025-02226

CVE-2025-0286

Affected Products

Paragon Partition Manager

References · 14

• https://bdu.fstec.ru/vul/2025-02226 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-0286 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0286 · Vendor Advisory
• https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2025022879 · Note
• https://paragon-software.com/support/#patches · Note
• https://twitter.com/CVEnew/status/1896767605421056268 · Twitter Post
• https://twitter.com/cybercronai/status/1896974040771768731 · Twitter Post
• https://t.me/true_secator/6798 · Telegram Post
• https://t.me/cvedetector/19388 · Telegram Post
• https://t.me/cvenotify/113373 · Telegram Post
• https://twitter.com/gothburz/status/1896289879480242484 · Twitter Post
• https://kb.cert.org/vuls/id/726882 · Note
• https://t.me/cvenotify/113185 · Telegram Post