cwjchoi01/cve-2025-65264CVE-2025-65264
In CPU‑Z 2.17 and earlier (and other products that use CPU-Z driver with version 1.0.6.1 and earlier), the driver (e.g. cpuz161.sys) dereferenced a value from a user‑supplied address and wrote it to the system buffer supplied by the caller. An attacker could read arbitrary kernel memory via an IOCTL by providing the target address in the input buffer.
This is a simple PoC that reads the token of the System process.
This can lead to info leak. It can also combine with drivers that are vulnerable to arbitrary kernel write to achieve kernel code execution.
This tool is for educational and research purposes only. Use it only on systems you own or have explicit permission to test. The author is not responsible for any misuse or damage caused by this program.
