CVE-2025-51619

A vulnerability in the Thesycon DPC Latency Checker driver (dpc.sys) thru 1.4.0 allows local unprivileged users to cause a denial-of-service (BSOD) condition on Windows systems. The driver exposes an IOCTL interface (0x81772008) that accepts user-controlled input without validating pointers before passing them to kernel APIs. Specifically, it dereferences a user-supplied pointer and uses the resulting value in a call to ExSetTimerResolution, leading to an arbitrary kernel memory access. Exploiting this flaw results in a system crash.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/3a1/Vulns/tree/main/CVE-2025-51619

Configurations

No configuration.

History

19 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad en el controlador Thesycon DPC Latency Checker (dpc.sys) hasta la versión 1.4.0 permite a usuarios locales sin privilegios causar una condición de denegación de servicio (BSOD) en sistemas Windows. El controlador expone una interfaz IOCTL (0x81772008) que acepta entrada controlada por el usuario sin validar punteros antes de pasarlos a las API del kernel. Específicamente, desreferencia un puntero proporcionado por el usuario y utiliza el valor resultante en una llamada a ExSetTimerResolution, lo que lleva a un acceso arbitrario a la memoria del kernel. La explotación de esta falla resulta en un fallo del sistema.

Information

Published : 2026-09-09 19:17

Updated : 2026-10-19 21:10

NVD link : CVE-2025-51619

Mitre link : CVE-2025-51619

CVE.ORG link : CVE-2025-51619

JSON object : View

Products Affected

No product.

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2025-51619", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-51619", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-09T18:56:47.206700Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-09-09T19:17:26.563", "references": [{"url": "https://github.com/3a1/Vulns/tree/main/CVE-2025-51619", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Thesycon DPC Latency Checker driver (dpc.sys) thru 1.4.0 allows local unprivileged users to cause a denial-of-service (BSOD) condition on Windows systems. The driver exposes an IOCTL interface (0x81772008) that accepts user-controlled input without validating pointers before passing them to kernel APIs. Specifically, it dereferences a user-supplied pointer and uses the resulting value in a call to ExSetTimerResolution, leading to an arbitrary kernel memory access. Exploiting this flaw results in a system crash."}, {"lang": "es", "value": "Una vulnerabilidad en el controlador Thesycon DPC Latency Checker (dpc.sys) hasta la versi\u00f3n 1.4.0 permite a usuarios locales sin privilegios causar una condici\u00f3n de denegaci\u00f3n de servicio (BSOD) en sistemas Windows. El controlador expone una interfaz IOCTL (0x81772008) que acepta entrada controlada por el usuario sin validar punteros antes de pasarlos a las API del kernel. Espec\u00edficamente, desreferencia un puntero proporcionado por el usuario y utiliza el valor resultante en una llamada a ExSetTimerResolution, lo que lleva a un acceso arbitrario a la memoria del kernel. La explotaci\u00f3n de esta falla resulta en un fallo del sistema."}], "lastModified": "2026-10-19T21:10:00.160", "sourceIdentifier": "cve@mitre.org"}