medium5.5
CVE-2025-65264
The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attacker to access sensit…
Impact
The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attacker to access sensitive information via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpuid | Cpu-Z | through 2.17 |