The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed via its IOCTL interface, allowing an attacker to access sensitive information via a crafted request.
References
| Link | Resource |
|---|---|
| https://github.com/cwjchoi01/CVE-2025-65264 | Exploit Third Party Advisory |
| https://www.cpuid.com/softwares/cpu-z.html | Product |
Configurations
History
06 Feb 2026, 19:58
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Cpuid cpu-z
Cpuid |
|
| CPE | cpe:2.3:a:cpuid:cpu-z:*:*:*:*:*:windows:*:* | |
| References | () https://github.com/cwjchoi01/CVE-2025-65264 - Exploit, Third Party Advisory | |
| References | () https://www.cpuid.com/softwares/cpu-z.html - Product |
27 Jan 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-20 |
27 Jan 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-27 17:16
Updated : 2026-02-06 19:58
NVD link : CVE-2025-65264
Mitre link : CVE-2025-65264
CVE.ORG link : CVE-2025-65264
JSON object : View
Products Affected
cpuid
- cpu-z
CWE
CWE-20
Improper Input Validation