CVE Catalog

CVE-2025-59327

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.11%

2th percentile - higher than 2% of all known CVEs

Summary

In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.

Risk Assessment

Similar to CVE-2025-59324, this flaw could allow bypassing integrity checks and executing unauthorized code.

Recommendation

It is recommended to update to version 7.7.4 or later and verify the integrity of bootxsa.efi.

Original NVD description (English source)

In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS