CVE-2025-0286 - CVE House
Back to Database
Status published Unknown CVE-2025-0286

CVE-2025-0286

Vulnerability Description

Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0286

Credits & Attribution

No credits recorded in the NVD database.

References

More from Paragon Software

View All →
CVE-2025-0289
CVE-2025-0289
Unknown 0
CVE-2025-0288
CVE-2025-0288
Unknown 0
CVE-2025-0287
CVE-2025-0287
Unknown 0
CVE-2025-0285
CVE-2025-0285
Unknown 0

Affected Vendor

Paragon Software

View all reports →

Affected Software

Partition Manager, Hard Disk Manager, Backup and Recovery, Drive Copy, Disk Wiper, Migrate OS to SSD
Vulnerable Versions:
15, 4

Timeline

Official Publish: March 3rd, 2025
Last Modified: September 9th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.