CVE-2017-15302

CVE-2017-15302 affects CPUID CPU-Z (Windows) up to version 1.81. The root cause is improper access rights to the kernel-mode driver (cpuz143_x64.sys) that allows an arbitrary read of any physical address via ioctl 0x9C402604 and the driver to map any physical page, returning the map page address ...

CVE-2017-15303

Versions of CPUID CPU-Z prior to 1.43 are vulnerable to an arbitrary memory write that allows for elevation of privileges . The root cause is that a local program can issue an ioctl 0x9C402430 call to the kernel-mode driver (e.g., cpuz141_x64.sys for version 1.41). This vulnerability is a known v...

CVE-2025-65264

The kernel driver of CPUID CPU-Z v2.17 and earlier (specifically involving cpuz161.sys and other products using driver version 1.0.6.1 and earlier) fails to validate user-supplied values passed via its IOCTL interface . An attacker can provide a target address in the input buffer to cause the dri...