Description
Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine.
Metrics
CVSS 3.1 8.4/10
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Paragon Software | Partition Manager | >= 15, <= 17.39 |
| Paragon Software | Hard Disk Manager | >= 15, <= 17.39 |
| Paragon Software | Backup and Recovery | >= 15, <= 17.39 |
| Paragon Software | Drive Copy | >= 15, <= 16 |
| Paragon Software | Disk Wiper | >= 15, <= 16 |
| Paragon Software | Migrate OS to SSD | >= 4, <= 5 |
References
- https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sysVendor Advisory
- https://www.kb.cert.org/vuls/id/726882Third Party Advisory
- https://www.paragon-software.com/support/#patchesProduct
Timeline
- Published
- Mar 3, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed