CVE-2025-8412

LOW

VMDP: Potential buffer overflow in the RtlQueryRegistryValues function

Title source: cna

Description

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pack allows an attacker with the ability to modify the registry to affect the integrity of the driver. We're not aware of a feasible way to exploit this currently. This issue affects Virtual Machine Driver Pack: before e7a602ec232756ead019bdf19d6d3b9d010cc94b.

References (1)

Core 1

Core References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-8412

Scores

CVSS v4 2.0

EPSS 0.0009

EPSS Percentile 0.6%

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-120

Status published

Products (1)

SUSE/Virtual Machine Driver Pack < e7a602ec232756ead019bdf19d6d3b9d010cc94b

Published Jul 14, 2026

Tracked Since Jul 14, 2026