BaseFortify

Publication date: 2025-10-15

Last updated on: 2025-10-16

Assigner: Lenovo Group Ltd.

Description

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-15

Last Modified

2025-10-16

Generated

2026-07-06

AI Q&A

2025-10-15

EPSS Evaluated

2026-07-05

NVD

CVE-2025-9548

Affected Vendors & Products

Vendor	Product	Version / Range
lenovo	power_management_driver	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a potential null pointer dereference in the Lenovo Power Management Driver. It could allow a local authenticated user to cause a Windows blue screen error (system crash).

Impact Analysis

The impact of this vulnerability is that a local authenticated user could cause a denial of service by triggering a Windows blue screen error, leading to system instability or downtime.

Hi! I’m here to help you understand CVE-2025-9548. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70