CVE-2025-24990

Published Oct 14, 2025

Last updated 7 months ago

Agere Modem

Zero-day

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-24990 refers to vulnerabilities found in the third-party Agere Modem driver (specifically ltmdm64.sys) that is included in Windows operating systems. The vulnerability is due to an untrusted pointer dereference. Microsoft is aware of the vulnerabilities and has removed the ltmdm64.sys driver in the October cumulative update. As a result, fax modem hardware that relies on this driver will no longer function on Windows. It has been recommended to remove any existing dependencies on this hardware.

Description: Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.
Source: secure@microsoft.com
NVD status: Analyzed
Products: windows_10_1507, windows_10_1607, windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_22h2, windows_11_23h2, windows_11_24h2, windows_11_25h2, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022, windows_server_2022_23h2, windows_server_2025

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Microsoft Windows Untrusted Pointer Dereference Vulnerability
Exploit added on: Oct 14, 2025
Exploit action due: Nov 4, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

secure@microsoft.com: CWE-822

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581",
            "versionEndExcluding": "10.0.10240.21161",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1",
            "versionEndExcluding": "10.0.14393.8519",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44",
            "versionEndExcluding": "10.0.17763.7919",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "8EA6DE31-A17D-43D4-9154-49B5FA8FB5A6",
            "versionEndExcluding": "10.0.19044.6456",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "B5441F68-143C-4091-B709-14CAC586DF76",
            "versionEndExcluding": "10.0.19045.6456",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "EF253003-2A82-4CFB-A6A3-267B3C485056",
            "versionEndExcluding": "10.0.22621.6060",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "85672C76-ADAD-468B-8C20-8A3587DA008A",
            "versionEndIncluding": "10.0.22631.6060",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "4A557865-B254-47F6-953B-340EF93FDB2B",
            "versionEndExcluding": "10.0.26100.6899",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "A7382D6B-5E7D-4769-BC40-0120F08DC6B1",
            "versionEndExcluding": "10.0.26200.6899",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "860ADFF9-62D0-425B-9310-99ACFC92EB12",
            "versionEndIncluding": "10.0.14393.8519",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A",
            "versionEndExcluding": "10.0.17763.7919",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7",
            "versionEndExcluding": "10.0.20348.4294",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600",
            "versionEndExcluding": "10.0.25398.1913",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41",
            "versionEndIncluding": "10.0.26100.6899",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.