Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-5324— TechPowerUp GPU-Z 0x8000645C IOCTL GPU-Z.sys sub_140001880 memory leak

Quick assessment

Affected
TechPowerUp GPU-Z
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

TechPowerUp GPU-Z是TechPowerUp公司的一款用于管理和控制视频卡和图形处理器的轻量级应用程序。 TechPowerUp GPU-Z 2.23.0版本存在安全漏洞，该漏洞源于GPU-Z.sys库中sub_140001880函数存在内存泄漏。

CVSS 3.3 · Low EPSS 0.23% · P13

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-5324

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
TechPowerUp GPU-Z 0x8000645C IOCTL GPU-Z.sys sub_140001880 memory leak
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability, which was classified as problematic, was found in TechPowerUp GPU-Z 2.23.0. Affected is the function sub_140001880 in the library GPU-Z.sys of the component 0x8000645C IOCTL Handler. The manipulation leads to memory leak. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在移除最后引用时对内存的释放不恰当(内存泄露)
Source: CVE Program / CVE List V5
Vulnerability Title
TechPowerUp GPU-Z 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TechPowerUp GPU-Z是TechPowerUp公司的一款用于管理和控制视频卡和图形处理器的轻量级应用程序。 TechPowerUp GPU-Z 2.23.0版本存在安全漏洞，该漏洞源于GPU-Z.sys库中sub_140001880函数存在内存泄漏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
TechPowerUp GPU-Z 2.23.0 -

II. Public POCs for CVE-2025-5324

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-5324

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same vendor: TechPowerUp
Same weakness: CWE-401

V. Comments for CVE-2025-5324

No comments yet

Leave a comment