ByteOS Network

NVD Vulnerability Details :

CVE-2025-32776

Awaiting Analysis

Source-security-advisories@github.com

Published At-15 Apr, 2025 | 17:15

Updated At-03 Nov, 2025 | 20:18

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the `matrix_custom_frame` file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will be written into the RGB arguments which will be sent to the USB device. This issue has been patched in v3.10.2.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE ID	Type	Source
CWE-125	Secondary	security-advisories@github.com

CWE ID: CWE-125

Type: Secondary

Source: security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/openrazer/openrazer/commit/57610511d2548eda66999eaed5aa4517e89d6d39	security-advisories@github.com	N/A
https://github.com/openrazer/openrazer/commit/d869abd20995b4931795e1cde54d4ac84d9ca62f	security-advisories@github.com	N/A
https://github.com/openrazer/openrazer/issues/2433	security-advisories@github.com	N/A
https://github.com/openrazer/openrazer/security/advisories/GHSA-835j-6976-46jx	security-advisories@github.com	N/A
https://lists.debian.org/debian-lts-announce/2025/04/msg00032.html	af854a3a-2127-422b-91ae-364da2661108	N/A