CVE-2025-67790

Published: Dec 17, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. An unprivileged user could cause occasionally a Blue Screen Of Death (BSOD) on Windows computers by using an IOCTL and an unterminated string.

Affected (3)

Products: Drivelock: Drivelock

Drivelock

1 product

Drivelock

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Drivelock Drivelock	From 24.1 to 24.1.6
Drivelock Drivelock	From 24.2 to 24.2.7
Drivelock Drivelock	From 25.1 to 25.1.5

Related CWEs

CWE-170

Improper Null Termination

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.

References (1)

https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-005-BufferOverreadBSOD.htm

Source: cve@mitre.org

Release NotesVendor Advisory

Timeline

No history available yet.