Security Advisory
CVE-2025-0287
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.