CVE-2025-24990KEV · OVERDUECWE-822

Windows Agere Modem Driver Elevation of Privilege Vulnerability

High · published October 14, 2025

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 93.6th percentile for exploit probability.

354
days past CISA
deadline
CVSS v3.1
7.8
EPSS
6%
Percentile
93.6
In the wild
Confirmed
What it is

⚡ A critical driver for fax modems is being removed as of October — say goodbye to ltmdm64.sys! 📞 Think of this like an outdated train schedule being scrapped; if your train (fax modem) relies on the old timetable (the driver), it’s going to be stuck at the station! Without the ltmdm64.sys driver, any fax modem hardware reliant on it will simply stop functioning on Windows. This could lead to major disruptions for businesses still relying on dated fax technologies, which can be absolutely devastating in critical operations!

Put simply

Think of this like an outdated train schedule being scrapped; if your train (fax modem) relies on the old timetable (the driver), it’s going to be stuck at the station! This vulnerability arises from the impending removal of the Agere Modem driver in Windows, causing fax modems that depend on ltmdm64.sys to become inoperable. Users reliant on this driver will face a sudden loss of functionality without an alternative.

What to do

Without the ltmdm64.sys driver, any fax modem hardware reliant on it will simply stop functioning on Windows. This could lead to major disruptions for businesses still relying on dated fax technologies, which can be absolutely devastating in critical operations! To mitigate this issue, it's essential to remove any dependencies on the ltmdm64.sys driver and transition to alternative solutions for faxing needs. Regularly update your systems to ensure that you're using supported drivers and software moving forward. You've got this! Transitioning to modern solutions will keep your operations running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.06369 · 93.6th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2025-10-14T17:00Z
KEV added
2025-10-14 · due 2025-11-04
EPSS history
Timeline
  • 14 OCT 17:00Z
    Windows Agere Modem Driver Elevation of Privilege Vulnerability
    cvelistv5
  • 14 OCT 00:00Z
    Added to CISA KEV — remediate by Nov 4
    kev