Openrazer: By writing specially crafted data to the matrix_custom_frame file, an attacker can cause the custom kernel driver to read more bytes than provided… (CVE-2025-32776)
OpenRazer is an open source driver for controlling Razer device lighting on GNU/Linux. A vulnerability exists where writing specially crafted data to the matrix_custom_frame file causes the kernel driver to read more bytes than provided by user space. This leads to potentially malicious data being sent to the USB device. The issue is patched in version 3.10.2.
AI Analysis
Technical Summary
The OpenRazer driver for GNU/Linux contains a vulnerability (CVE-2025-32776) where an attacker can write specially crafted data to the matrix_custom_frame file, causing the custom kernel driver to read beyond the provided data length. This out-of-bounds read results in unintended data being used as RGB arguments sent to the USB device. The flaw affects multiple specific versions of OpenRazer and has been fixed in version 3.10.2.
Potential Impact
An attacker with local low-privilege access can exploit this vulnerability to cause the kernel driver to read unintended memory data and send it to the USB device as RGB arguments. The CVSS score of 5.5 indicates a medium severity impact with high confidentiality impact but no integrity or availability impact. There are no known exploits in the wild.
Mitigation Recommendations
This vulnerability has been patched in OpenRazer version 3.10.2. Users should upgrade to version 3.10.2 or later to remediate this issue. No additional mitigation is required once patched.
Openrazer: By writing specially crafted data to the matrix_custom_frame file, an attacker can cause the custom kernel driver to read more bytes than provided… (CVE-2025-32776)
Description
OpenRazer is an open source driver for controlling Razer device lighting on GNU/Linux. A vulnerability exists where writing specially crafted data to the matrix_custom_frame file causes the kernel driver to read more bytes than provided by user space. This leads to potentially malicious data being sent to the USB device. The issue is patched in version 3.10.2.
CVSS v3.1
Score 5.5medium
Affected software
pkg:deb/ubuntu/openrazer?arch=source&distro=focalpkg:deb/ubuntu/openrazer?arch=source&distro=jammypkg:deb/ubuntu/openrazer?arch=source&distro=noblepkg:deb/ubuntu/openrazer?arch=source&distro=questingpkg:deb/ubuntu/openrazer?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenRazer driver for GNU/Linux contains a vulnerability (CVE-2025-32776) where an attacker can write specially crafted data to the matrix_custom_frame file, causing the custom kernel driver to read beyond the provided data length. This out-of-bounds read results in unintended data being used as RGB arguments sent to the USB device. The flaw affects multiple specific versions of OpenRazer and has been fixed in version 3.10.2.
Potential Impact
An attacker with local low-privilege access can exploit this vulnerability to cause the kernel driver to read unintended memory data and send it to the USB device as RGB arguments. The CVSS score of 5.5 indicates a medium severity impact with high confidentiality impact but no integrity or availability impact. There are no known exploits in the wild.
Mitigation Recommendations
This vulnerability has been patched in OpenRazer version 3.10.2. Users should upgrade to version 3.10.2 or later to remediate this issue. No additional mitigation is required once patched.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2025-32776
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:20.04:LTS","Ubuntu:22.04:LTS","Ubuntu:24.04:LTS","Ubuntu:25.10","Ubuntu:26.04:LTS"]
- Cvss Version
- 3.1
Threat ID: 6a74cf9fbf8831d5391b0541
Added to database: 08/06/2026, 18:17:03 UTC
Last enriched: 08/06/2026, 19:08:42 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 14
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.