CVE-2025-59319
Received Received - Intake

CryptoPro Secure Disk Boot Partition Integrity Bypass

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: MITRE

Description
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded type value. A crafted Linux partition could be inserted ahead of this intended target, allowing for code execution in the context of high privilege.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-12
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2025-59319
EUVD
EUVD-2025-210711

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
cpsd crypto_pro_secure_disk to 7.7.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 does not properly verify the integrity of the intended boot partition. It selects the first partition matching a hardcoded type value, which could allow an attacker to insert a malicious Linux partition before the intended target. This could lead to arbitrary code execution with high privileges.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain control of your system during boot. This could lead to data theft, installation of malware, or complete system compromise. Users of affected versions should update immediately to mitigate risk.

Compliance Impact

This vulnerability could violate compliance requirements that mandate secure boot processes and data integrity, such as GDPR's security principle or HIPAA's access controls. Failure to address it may result in non-compliance penalties and increased exposure to data breaches.

Mitigation Strategies

Update CPSD CryptoPro Secure Disk for Bitlocker to version 7.7.4 or later to address the boot partition integrity issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-59319. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart