Skip to content
OpenAdvisories
Medium · 5.7 CVE-2025-5942 EUVD-2025-24660GHSA-wwxh-p9hv-8wfx

Heap Overflow in Netskope Endpoint DLP Driver

Published Aug 14, 2025 · Updated Aug 18, 2025 · Assigned by Netskope

Description

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation can also potentially be performed by an unprivileged user whose NS Client is configured to use Endpoint DLP. A successful exploit can result in a denial-of-service for the local machine.

Affected products

VendorProductAffectedFixed
Netskope Netskope Client < 126.0.9, 129.0.0 126.0.9, 129.0.0

References