CVE-2025-5942CWE-122

Heap Overflow in Netskope Endpoint DLP Driver

Medium · published August 14, 2025

CVSS v4.0
5.7
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation can also potentially be performed by an unprivileged user whose NS Client is configured to use Endpoint DLP. A successful exploit can result in a denial-of-service for the local machine.

The record
Technical detail
CVSS v4.0
5.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00138 · 2.9th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2025-08-14T04:36Z
EPSS history
Timeline
  • 14 AUG 04:36Z
    Heap Overflow in Netskope Endpoint DLP Driver
    cvelistv5