Log in Start free

Vulnerability · Published Jul 14, 2026 · Assigned by suse

CVE-2025-8412VMDP: Potential buffer overflow in the RtlQueryRegistryValues function

Low 2.0

In plain English

A low-severity buffer overflow in Virtual Machine Driver Pack from SUSE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).

Severity (CVSS 4.0)2.0Low
Exploit odds (30 days)0.1%top 98.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pack allows an attacker with the ability to modify the registry to affect the integrity of the driver. We're not aware of a feasible way to exploit this currently. This issue affects Virtual Machine Driver Pack: before e7a602ec232756ead019bdf19d6d3b9d010cc94b.

Affected products (as reported)

VendorProductVersions
SUSE Virtual Machine Driver Pack 0 – before e7a602ec232756ead019bdf19d6d3b9d010cc94b

Weakness: CWE-120 · Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

References