{"id":"EUVD-2025-36537","enisaUuid":"78681148-c861-347f-974b-ccd47e7ddd90","description":"The GameDriverX64.sys kernel-mode anti-cheat driver (v7.23.4.7 and earlier) contains an access control vulnerability in one of its IOCTL handlers. A user-mode process can open a handle to the driver device and send specially crafted IOCTL requests. These requests are executed in kernel-mode context without proper authentication or access validation, allowing the attacker to terminate arbitrary processes, including critical system and security services, without requiring administrative privileges.","datePublished":"Oct 28, 2025, 12:00:00 AM","dateUpdated":"Dec 9, 2025, 5:10:26 PM","baseScore":5.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/pollotherunner/CVE-2025-61155/blob/main/advisory.md\nhttps://www.hotta.com.tw\n","aliases":"CVE-2025-61155\nGHSA-9qfv-m6w2-fhch\n","assigner":"mitre","epss":0.28,"enisaIdProduct":[{"id":"fe18ab0e-6505-3d6d-80ed-7acaf530e54c","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"d2c50862-88f9-3f9d-a173-9403196246f4","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"4d04335b-3147-3c05-b48a-6dda85b844c1","vulnerability":{"id":"GHSA-9qfv-m6w2-fhch","description":"Hotta Studio GameDriverX64.sys 7.23.4.7, a signed kernel-mode anti-cheat driver, allows local attackers to cause a denial of service by crashing arbitrary processes via sending crafted IOCTL requests.","datePublished":"Oct 28, 2025, 6:30:30 PM","dateUpdated":"Dec 4, 2025, 6:30:37 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-61155\nhttps://github.com/pollotherunner/CVE-2025-61155/blob/main/advisory.md\nhttps://www.hotta.com.tw\nhttp://gamedriverx64sys.com\nhttp://hotta.com\n","enisa_id":"EUVD-2025-36537\n","aliases":"CVE-2025-61155\nGHSA-9qfv-m6w2-fhch\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:43:45 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"4ee48d36-5848-399e-8e0e-6c800891721c","vulnerability":{"id":"CVE-2025-61155","description":"The GameDriverX64.sys kernel-mode anti-cheat driver (v7.23.4.7 and earlier) contains an access control vulnerability in one of its IOCTL handlers. A user-mode process can open a handle to the driver device and send specially crafted IOCTL requests. These requests are executed in kernel-mode context without proper authentication or access validation, allowing the attacker to terminate arbitrary processes, including critical system and security services, without requiring administrative privileges.","datePublished":"Oct 28, 2025, 12:00:00 AM","dateUpdated":"Dec 9, 2025, 5:10:26 PM","status":"PUBLISHED","baseScore":5.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/pollotherunner/CVE-2025-61155/blob/main/advisory.md\nhttps://www.hotta.com.tw\n","enisa_id":"EUVD-2025-36537\n","assigner":"mitre","epss":0.28,"dataProcessed":"Nov 9, 2026, 7:14:24 AM","vulnerabilityProduct":[{"id":"df743064-9e9a-3ddd-9d1b-75ae42d544cb","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"99b78af7-b472-3136-b63f-dde5f92ec005","vendor":{"name":"n/a"}}]}}],"enisaIdAdvisory":[]}