CVE-2025-32776
- Source
- https://cve.org/CVERecord?id=CVE-2025-32776
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-32776.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-32776
- Aliases
-
- GHSA-835j-6976-46jx
- Downstream
- Published
- 2025-04-15T16:32:20Z
- Modified
- 2026-10-22T16:13:14Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- OpenRazer Vulnerable to Out of Bounds Read
- Details
-
OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the
matrix_custom_framefile, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will be written into the RGB arguments which will be sent to the USB device. This issue has been patched in v3.10.2. - Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-125" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32776.json" }- References
-
- https://lists.debian.org/debian-lts-announce/2025/04/msg00032.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32776.json
- https://github.com/openrazer/openrazer/security/advisories/GHSA-835j-6976-46jx
- https://nvd.nist.gov/vuln/detail/CVE-2025-32776
- https://github.com/openrazer/openrazer/issues/2433
- https://github.com/openrazer/openrazer/commit/57610511d2548eda66999eaed5aa4517e89d6d39
- https://github.com/openrazer/openrazer/commit/d869abd20995b4931795e1cde54d4ac84d9ca62f
Affected packages
Git / github.com/openrazer/openrazer
Affected ranges
- Type
- GIT
- Repo
- https://github.com/openrazer/openrazer
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0" }, { "fixed": "3.10.2" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "range": [ { "fixed": "57610511d2548eda66999eaed5aa4517e89d6d39" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "d869abd20995b4931795e1cde54d4ac84d9ca62f" } ], "source": "REFERENCES_COMMIT" } ] }
Affected versions
v1.*
v1.0.0
v1.0.10
v1.0.11
v1.0.12
v1.0.13
v1.0.17
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.0.6
v1.0.7
v1.0.7-2
v1.0.8
v1.0.9
v1.1.10
v1.1.11
v1.1.12
v1.1.13
v1.1.14
v1.1.15
v1.1.16
v1.1.3
v1.1.5
v1.1.6
v1.1.7
v1.1.8
v1.1.9
v2.*
v2.0.0
v2.1
v2.1.1
v2.2.0
v2.2.1
v2.2.2
v2.3.0
v2.3.1
v2.4.0
v2.5.0
v2.6.0
v2.7.0
v2.8.0
v2.9.0
v3.*
v3.0.0
v3.0.1
v3.1.0
v3.10.0
v3.10.1
v3.2.0
v3.3.0
v3.4.0
v3.5.0
v3.5.1
v3.6.0
v3.6.1
v3.7.0
v3.8.0
v3.9.0
Database specific
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-32776.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"47590114655355656077716984254102056996",
"331344300948404451301358266320326519500",
"133741702371719360137376930609696845104",
"51257226346872006590313431804975943517"
],
"threshold": 0.9
},
"id": "CVE-2025-32776-98bbda29",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openrazer/openrazer/commit/d869abd20995b4931795e1cde54d4ac84d9ca62f",
"target": {
"file": "driver/razermouse_driver.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"47590114655355656077716984254102056996",
"331344300948404451301358266320326519500",
"133741702371719360137376930609696845104",
"38255808339507428677391565122842795504"
],
"threshold": 0.9
},
"id": "CVE-2025-32776-b5ccd535",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openrazer/openrazer/commit/d869abd20995b4931795e1cde54d4ac84d9ca62f",
"target": {
"file": "driver/razeraccessory_driver.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "289278899321352869197954770198592002446",
"length": 497
},
"id": "CVE-2025-32776-bfb8ffbd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openrazer/openrazer/commit/57610511d2548eda66999eaed5aa4517e89d6d39",
"target": {
"file": "driver/razerchromacommon.c",
"function": "razer_chroma_misc_one_row_set_custom_frame"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"159328815904116716028706410028672087567",
"332882653563184102179081595821016986174",
"165692217720435533895862584439258658461",
"301379299110973101073952802997727599248",
"159328815904116716028706410028672087567",
"332882653563184102179081595821016986174",
"207647252192534638368225095461434825262",
"254720913305670817860904997837156273732",
"159328815904116716028706410028672087567",
"332882653563184102179081595821016986174",
"150647895857651873620646493275950199152",
"165351587234037937985826854476142332531"
],
"threshold": 0.9
},
"id": "CVE-2025-32776-c6e048e7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openrazer/openrazer/commit/57610511d2548eda66999eaed5aa4517e89d6d39",
"target": {
"file": "driver/razerchromacommon.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "258581665864408350554394731634790807067",
"length": 5029
},
"id": "CVE-2025-32776-c8b45f72",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openrazer/openrazer/commit/d869abd20995b4931795e1cde54d4ac84d9ca62f",
"target": {
"file": "driver/razerkbd_driver.c",
"function": "razer_attr_write_matrix_custom_frame"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"47590114655355656077716984254102056996",
"181617733323215242777972717661360236891",
"169437073838031052005447702287126982491",
"190172096563518930428184902050442021065"
],
"threshold": 0.9
},
"id": "CVE-2025-32776-ccb94801",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openrazer/openrazer/commit/d869abd20995b4931795e1cde54d4ac84d9ca62f",
"target": {
"file": "driver/razerkbd_driver.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "237118950043714959765008075211778266046",
"length": 2768
},
"id": "CVE-2025-32776-d1817c5b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openrazer/openrazer/commit/d869abd20995b4931795e1cde54d4ac84d9ca62f",
"target": {
"file": "driver/razeraccessory_driver.c",
"function": "razer_attr_write_matrix_custom_frame"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "49286829304986114269944014652148718412",
"length": 636
},
"id": "CVE-2025-32776-d50e830f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openrazer/openrazer/commit/57610511d2548eda66999eaed5aa4517e89d6d39",
"target": {
"file": "driver/razerchromacommon.c",
"function": "razer_chroma_extended_matrix_set_custom_frame2"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "54326796530936215010564497523296944120",
"length": 3735
},
"id": "CVE-2025-32776-e3b10a6f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openrazer/openrazer/commit/d869abd20995b4931795e1cde54d4ac84d9ca62f",
"target": {
"file": "driver/razermouse_driver.c",
"function": "razer_attr_write_matrix_custom_frame"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "188275618047599413817726134682598705592",
"length": 597
},
"id": "CVE-2025-32776-f7c71cdd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openrazer/openrazer/commit/57610511d2548eda66999eaed5aa4517e89d6d39",
"target": {
"file": "driver/razerchromacommon.c",
"function": "razer_chroma_standard_matrix_set_custom_frame"
}
}
]
vanir_signatures_modified
"2026-10-22T16:13:14Z"