CVE-2025-51619: Thesycon DPC Latency Checker driver vulnerability
A vulnerability in the Thesycon DPC Latency Checker driver (dpc.sys) thru 1.4.0 allows local unprivileged users to cause a denial-of-service (BSOD) condition on Windows systems. The driver exposes an IOCTL interface (0x81772008) that accepts user-controlled input without validating pointers before passing them to kernel APIs. Specifically, it dereferences a user-supplied pointer and uses the resulting value in a call to ExSetTimerResolution, leading to an arbitrary kernel memory access. Exploiting this flaw results in a system crash.
Affected Software
Event History
Frequently Asked Questions
Who can trigger the denial of service?
A local unprivileged user can trigger the flaw. Remote exploitation is not described in the available information.
What does an attacker need to exploit it?
The attacker needs local access to a Windows system with the affected dpc.sys driver installed and access to its IOCTL interface. Exploitation involves sending controlled input to IOCTL 0x81772008.
How can defenders determine whether a system may be affected?
Check whether the Thesycon DPC Latency Checker driver dpc.sys is installed and whether its version is 1.4.0 or earlier. Systems without this driver are not indicated as affected by the provided information.
What is the impact of successful exploitation?
Successful exploitation causes a Windows blue-screen crash, resulting in denial of service. The provided information does not describe code execution, privilege escalation, or data disclosure.