CVE-2025-0287: Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is

Routine

MEDIUM 5.1UPGRADEUPGRADEUPGRADE

CVE-2025-0287 is a medium-severity flaw (CVSS 5.1) affecting paragon backup \& recovery, paragon disk wiper, paragon drive copy. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	5.1 (Medium)
Attack vector	Local
Attack complexity	Low
Privileges needed	None
User interaction	None
EPSS exploit chance	0.4% (top 71%)
CISA exploited list	No
Weakness	CWE-476
Published	2025-03-03
Last modified	2026-06-17

Publisher (CNA): CERT/CC · Vendor: paragon-software

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2025-03-03 17:15 UTCPublished CVE record published
2026-06-17 08:26 UTCUpdated Record last modified

paragon-software paragon backup \& recovery UPGRADE

Affected: >= 15 and <= 17.39

Fixed in: newer than 17.39

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy paragon-backup--recovery || rpm -q paragon-backup--recovery || paragon-backup--recovery --version

2. UPGRADE to newer than 17.39 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-backup--recovery

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-backup--recovery

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison paragon-backup--recovery sudo apt install paragon-backup--recovery=<VERSION_BEFORE_15> sudo apt-mark hold paragon-backup--recovery

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-backup--recovery sudo dnf downgrade paragon-backup--recovery-<VERSION_BEFORE_15> sudo dnf versionlock add paragon-backup--recovery

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

paragon-software paragon disk wiper UPGRADE

Affected: >= 15 and <= 16

Fixed in: newer than 16

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy paragon-disk-wiper || rpm -q paragon-disk-wiper || paragon-disk-wiper --version

2. UPGRADE to newer than 16 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-disk-wiper

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-disk-wiper

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison paragon-disk-wiper sudo apt install paragon-disk-wiper=<VERSION_BEFORE_15> sudo apt-mark hold paragon-disk-wiper

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-disk-wiper sudo dnf downgrade paragon-disk-wiper-<VERSION_BEFORE_15> sudo dnf versionlock add paragon-disk-wiper

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

paragon-software paragon drive copy UPGRADE

Affected: >= 15 and <= 16

Fixed in: newer than 16

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy paragon-drive-copy || rpm -q paragon-drive-copy || paragon-drive-copy --version

2. UPGRADE to newer than 16 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-drive-copy

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-drive-copy

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison paragon-drive-copy sudo apt install paragon-drive-copy=<VERSION_BEFORE_15> sudo apt-mark hold paragon-drive-copy

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-drive-copy sudo dnf downgrade paragon-drive-copy-<VERSION_BEFORE_15> sudo dnf versionlock add paragon-drive-copy

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

paragon-software paragon hard disk manager UPGRADE

Affected: >= 15 and <= 17.39

Fixed in: newer than 17.39

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy paragon-hard-disk-manager || rpm -q paragon-hard-disk-manager || paragon-hard-disk-manager --version

2. UPGRADE to newer than 17.39 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-hard-disk-manager

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-hard-disk-manager

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison paragon-hard-disk-manager sudo apt install paragon-hard-disk-manager=<VERSION_BEFORE_15> sudo apt-mark hold paragon-hard-disk-manager

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-hard-disk-manager sudo dnf downgrade paragon-hard-disk-manager-<VERSION_BEFORE_15> sudo dnf versionlock add paragon-hard-disk-manager

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

paragon-software paragon migrate os to ssd UPGRADE

Affected: >= 4 and <= 5

Fixed in: newer than 5

Safe to downgrade to: a release before 4

1. Check installed version

apt-cache policy paragon-migrate-os-to-ssd || rpm -q paragon-migrate-os-to-ssd || paragon-migrate-os-to-ssd --version

2. UPGRADE to newer than 5 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-migrate-os-to-ssd

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-migrate-os-to-ssd

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 4 (Debian / Ubuntu)

apt-cache madison paragon-migrate-os-to-ssd sudo apt install paragon-migrate-os-to-ssd=<VERSION_BEFORE_4> sudo apt-mark hold paragon-migrate-os-to-ssd

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-migrate-os-to-ssd sudo dnf downgrade paragon-migrate-os-to-ssd-<VERSION_BEFORE_4> sudo dnf versionlock add paragon-migrate-os-to-ssd

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

paragon-software paragon partition manager UPGRADE

Affected: >= 15 and <= 17.39

Fixed in: newer than 17.39

Safe to downgrade to: a release before 15

1. Check installed version

apt-cache policy paragon-partition-manager || rpm -q paragon-partition-manager || paragon-partition-manager --version

2. UPGRADE to newer than 17.39 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade paragon-partition-manager

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade paragon-partition-manager

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 15 (Debian / Ubuntu)

apt-cache madison paragon-partition-manager sudo apt install paragon-partition-manager=<VERSION_BEFORE_15> sudo apt-mark hold paragon-partition-manager

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list paragon-partition-manager sudo dnf downgrade paragon-partition-manager-<VERSION_BEFORE_15> sudo dnf versionlock add paragon-partition-manager

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-0287?

paragon backup \& recovery: upgrade to newer than 17.39; paragon disk wiper: upgrade to newer than 16; paragon drive copy: upgrade to newer than 16. Exact commands for each OS are on this page.

Is CVE-2025-0287 being exploited?

CVE-2025-0287 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-0287 affect?

CVE-2025-0287 affects paragon backup \& recovery, paragon disk wiper, paragon drive copy. Severity is medium (CVSS 5.1). Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel

How urgent is CVE-2025-0287?

Priority 25/100. No elevated risk signals yet.

Related CVEs

CVE-2025-0289 HIGH 7.8 UPGRADE UPGRADE Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the
CVE-2025-0288 HIGH 7.8 UPGRADE UPGRADE Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facili
CVE-2025-0286 HIGH 8.4 UPGRADE UPGRADE Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys t
CVE-2025-0285 HIGH 7.8 UPGRADE UPGRADE Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys

References

← Back to latest CVEs