High · 7.5 CVE-2025-59325 EUVD-2025-210718GHSA-5r37-4g77-fvg9

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents, allowing for the offline recovery of secret…

Published Aug 12, 2026 · Updated Aug 18, 2026 · Assigned by mitre

Description

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents, allowing for the offline recovery of secrets and cryptographic details.

References

https://www.cpsd.at/blog/
https://i.blackhat.com/BH-USA-26/Presentations/US-26-Burch-The-Cost-of-Obscurity-Wednesday.pdf
https://i.blackhat.com/BH-USA-26/Presentations/US-26-Burch-The-Cost-of-Obscurity-wp.pdf