Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-8412— VMDP: Potential buffer overflow in the RtlQueryRegistryValues function

Quick assessment

Affected
SUSE Virtual Machine Driver Pack
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SUSE Virtual Machine Driver Pack是德国SUSE公司的一款虚拟机驱动程序集合包。 SUSE Virtual Machine Driver Pack存在缓冲区错误漏洞，该漏洞源于缓冲区复制未检查输入大小，可能允许具有修改注册表能力的攻击者影响驱动的完整性。

AI Predicted 4.4 Difficulty: Theoretical EPSS 0.12% · P2

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
SUSE Virtual Machine Driver Pack < e7a602ec232756ead019bdf19d6d3b9d010cc94b affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-8412

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
VMDP: Potential buffer overflow in the RtlQueryRegistryValues function
Source: CVE Program / CVE List V5
Vulnerability Description
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pack allows an attacker with the ability to modify the registry to affect the integrity of the driver. We're not aware of a feasible way to exploit this currently. This issue affects Virtual Machine Driver Pack: before e7a602ec232756ead019bdf19d6d3b9d010cc94b.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: CVE Program / CVE List V5
Vulnerability Title
SUSE Virtual Machine Driver Pack 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SUSE Virtual Machine Driver Pack是德国SUSE公司的一款虚拟机驱动程序集合包。 SUSE Virtual Machine Driver Pack存在缓冲区错误漏洞，该漏洞源于缓冲区复制未检查输入大小，可能允许具有修改注册表能力的攻击者影响驱动的完整性。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
SUSE Virtual Machine Driver Pack 0 ~ e7a602ec232756ead019bdf19d6d3b9d010cc94b -

II. Public POCs for CVE-2025-8412

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-8412

请登录查看更多情报信息。

Vendor Advisories for CVE-2025-8412 (1)

IV. Related Vulnerabilities

Same vendor: SUSE
Same weakness: CWE-120

V. Comments for CVE-2025-8412

No comments yet

Leave a comment