CVE-2025-5942: Heap Overflow in Netskope Endpoint DLP Driver
Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation can also potentially be performed by an unprivileged user whose NS Client is configured to use Endpoint DLP. A successful exploit can result in a denial-of-service for the local machine.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5942?
CVE-2025-5942 has been classified with a severity rating indicating a potential for significant impact due to the possibility of a Blue-Screen-of-Death (BSOD).
How do I fix CVE-2025-5942?
To fix CVE-2025-5942, update to the latest version of the Netskope NS Client provided by Netskope.
What are the impacts of CVE-2025-5942 exploitation?
Exploitation of CVE-2025-5942 can result in a heap overflow in the epdlpdrv.sys driver, leading to system crashes and Blue-Screen-of-Death (BSOD).
Who is affected by CVE-2025-5942?
CVE-2025-5942 affects users running the Netskope NS Client on Windows systems.
What type of attack does CVE-2025-5942 facilitate?
CVE-2025-5942 facilitates a heap overflow attack that can be executed by an unprivileged user.