CVE-2025-5324 | TechPowerUp GPU-Z 2.23.0 0x8000645C IOCTL GPU-Z.sys sub_140001880 memory leak

A vulnerability, which was classified as problematic, was found in TechPowerUp GPU-Z 2.23.0. Affected is the function sub_140001880 in the library GPU-Z.sys of the component 0x8000645C IOCTL Handler. The manipulation leads to memory leak.

This vulnerability is traded as CVE-2025-5324. It is possible to launch the attack on the local host. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.