CVE-2025-9548: Null Pointer Dereference

Published Oct 15, 2025

Updated

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error.

Affected Software

1 affected component

Lenovo Power Management Driver

Remediation

Information

Upgrade to the version (or newer) indicated in the advisory: https://support.lenovo.com/us/en/product_security/LEN-203293

Event History

Oct 15, 2025

CVE Published

via MITRE·02:25 PM

Data Sourced

via MITRE·02:25 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:16 PM

DescriptionSeverityWeakness

Feb 28, 57989

Event

via FIRST·05:00 AM

Frequently Asked Questions

What is the severity of CVE-2025-9548?

CVE-2025-9548 is categorized as a potential null pointer dereference vulnerability, which can lead to a blue screen error.

How do I fix CVE-2025-9548?

To address CVE-2025-9548, ensure that you update the Lenovo Power Management Driver to the latest version provided by Lenovo.

Who is affected by CVE-2025-9548?

CVE-2025-9548 affects local authenticated users of the Lenovo Power Management Driver on Windows systems.

What causes the issue in CVE-2025-9548?

The issue in CVE-2025-9548 is caused by a potential null pointer dereference in the Lenovo Power Management Driver.

Can CVE-2025-9548 be exploited remotely?

CVE-2025-9548 cannot be exploited remotely as it requires local authenticated user access to cause the blue screen error.