← Back to driver explorer
Driver intelligenceVulnerableVerified

fbiosdrv.sys

Fujitsu BIOS Driver versions before 2.5.0.0 are affected by CVE-2025-65001. The tracked 1.2.1.0 through 2.4.0.0 fBiosDrv.sys builds all precede the fixed release. A crafted request from a local authenticated administrator can trigger an out-of-bounds write, potentially causing arbitrary kernel code execution or denial of service.

UUID / dc82ae79-d3e2-439a-a4c7-ec1f23e1261bADDED / 2026-08-31AUTHOR / Michael Haag

Known samples 9

0 recorded TRUE · 0 recorded FALSE · 9 unknown for loading despite HVCI. Results apply to individual samples.

fbiosdrv.sysSample 1 · HVCI unknown
MD5
e202f26b0ff4f8b1b8c99aec91381212
SHA1
3ced179b3223e40d6e0aaab057cacf326dec6bca
SHA256
6e06493619cf1358bd2c5aafd375e78bba233b835e9d9ef21eafee30c23a62d9
Imphash
101d843ca78c691d4c6f938158aca795
Authentihash MD5
f47df8e082908ba2bcf6d25ed710bed9
Authentihash SHA1
9837382375c6b7025d1c00525fc123eeacefe5eb
Authentihash SHA256
ca1c24baafb81908461d7c858749354df0648acd376265683c189c9d00e856cc
Machine
AMD64
Version
2.4.0.0
Publisher
FUJITSU CLIENT COMPUTING LIMITED
fBiosDrv.sysSample 2 · HVCI unknown
MD5
8f3c74a9a4c8767fec6ccc6aefcbd791
SHA1
242bdfbabb90bc77977c164031cbc0d14e2812cc
SHA256
1955a346d1e414f354c69fe86a846450403d456739f8adeef17281056f8b71da
Imphash
d3b8c7777bd6cfeb46b95304000c5cdc
Authentihash MD5
609ee93f38c135423560d24f7c63c6fe
Authentihash SHA1
62eb2e81f2b54ee5ab17f1ac11fe816c9ccbf750
Authentihash SHA256
535c85ce3b60c64d1b7fb202ca3751f36bb96f7bff11b8bed24aafb5e3071df3
Machine
AMD64
Version
2.3.40.0
Publisher
FUJITSU CLIENT COMPUTING LIMITED
fBiosDrv.sysSample 3 · HVCI unknown
MD5
b668c532afda4f2cca4ee38b4b1bcad6
SHA1
cbb987bdfa30b73c384c61d97e211485b9235478
SHA256
23a99ab2bd0ad069a088a2b256bf45ff96082e33ed2580ae06eeca06c053bec8
Imphash
86842affc0e2217f0bc0c6c5bcb5bd59
Authentihash MD5
841bec58dac9f1e5fcbb34f1cf4b96a5
Authentihash SHA1
7124f5433f25542e9bf3566c75a244eb82d91dad
Authentihash SHA256
13f85a2966610799c72c917262e9f3431891b87780fd269d52e4e11b32808d06
Machine
AMD64
Version
1.2.1.0
Publisher
FUJITSU LIMITED
fBiosDrv.sysSample 4 · HVCI unknown
MD5
2cb15cafe598063d5b6d0f29e5fa8090
SHA1
a37da11592ccbb75dd9cebcb3846882d36f3b40b
SHA256
23b2615f9417d6545ad595492a4423f1330bbc7cde32a95a219b63b4c28ea8de
Imphash
86ef49f5f0767a73573cea0d82bc9ef4
Authentihash MD5
159ecef4cb6e9fbd8ce3cdc24f71a9da
Authentihash SHA1
107fe4242d7e630413123083d67b888bd9c21b91
Authentihash SHA256
af0b10dd5b8970b698accf85685be3a421b70e33b41188cdb8c09720b3053839
Machine
AMD64
Version
1.2.2.0
Publisher
FUJITSU LIMITED
fBiosDrv.sysSample 5 · HVCI unknown
MD5
e09f8892891a19e152af6348e1505559
SHA1
8201cd91a8f0858961c6abbc28197ab068569d7b
SHA256
25848f00e6cc7f5b7db1c52870d3592ea3dbaab00df76b5b7c542d3c9823d049
Imphash
86ef49f5f0767a73573cea0d82bc9ef4
Authentihash MD5
159ecef4cb6e9fbd8ce3cdc24f71a9da
Authentihash SHA1
107fe4242d7e630413123083d67b888bd9c21b91
Authentihash SHA256
af0b10dd5b8970b698accf85685be3a421b70e33b41188cdb8c09720b3053839
Machine
AMD64
Version
1.2.2.0
Publisher
FUJITSU LIMITED
fBiosDrv.sysSample 6 · HVCI unknown
MD5
502d0919855df4df066887c617ecdebb
SHA1
5b14bf31f4a470060eae01088e39ea26b12be37e
SHA256
444f9593bcbdaca3178bbe5da06d8641dd62bf4dbf1efad213e130f66800ac86
Imphash
d3b8c7777bd6cfeb46b95304000c5cdc
Authentihash MD5
609ee93f38c135423560d24f7c63c6fe
Authentihash SHA1
62eb2e81f2b54ee5ab17f1ac11fe816c9ccbf750
Authentihash SHA256
535c85ce3b60c64d1b7fb202ca3751f36bb96f7bff11b8bed24aafb5e3071df3
Machine
AMD64
Version
2.3.40.0
Publisher
FUJITSU CLIENT COMPUTING LIMITED
fBiosDrv.sysSample 7 · HVCI unknown
MD5
f83d14af05a9518450ed23e758c825dc
SHA1
bc1fd76a2d6aadbf31c3cf6174a0bab86c52214d
SHA256
5c4772d82a13d4169df33c35d411d8c62ea4ee4ee52e7d5508d81844421ad06b
Imphash
6364b695ace207a0ffb77647cc25da02
Authentihash MD5
e4b8fece834adfac273a3ff7a3666dcb
Authentihash SHA1
251e28cc30e1e59b63e0e75fdef1250e5c04fcf7
Authentihash SHA256
e44bb3ab324b727873079b55fa804ad1d35d156ea5a5c891808adc99e00bb713
Machine
AMD64
Version
2.2.32.0
Publisher
FUJITSU CLIENT COMPUTING LIMITED
fBiosDrv.sysSample 8 · HVCI unknown
MD5
649f89d9dd989b521008657f460968ca
SHA1
0e3d6088da9e35720d6282b5edc672e59e6f1269
SHA256
678fe5aa24a610ef149b30371edb7ad56b12fd0b7f5083c1d15ea091ec20a0a1
Imphash
6364b695ace207a0ffb77647cc25da02
Authentihash MD5
e4b8fece834adfac273a3ff7a3666dcb
Authentihash SHA1
251e28cc30e1e59b63e0e75fdef1250e5c04fcf7
Authentihash SHA256
e44bb3ab324b727873079b55fa804ad1d35d156ea5a5c891808adc99e00bb713
Machine
AMD64
Version
2.2.32.0
Publisher
FUJITSU CLIENT COMPUTING LIMITED
fBiosDrv.sysSample 9 · HVCI unknown
MD5
5f481d764ce8224cfb3bdaec4e14adde
SHA1
ffef42377289d0ce813ce0b45ac480a2bd99284b
SHA256
e07be5f25f16a4afc01562aac0e123e6f3b25ed7ba75d114328b4ec445c21440
Imphash
6364b695ace207a0ffb77647cc25da02
Authentihash MD5
e4b8fece834adfac273a3ff7a3666dcb
Authentihash SHA1
251e28cc30e1e59b63e0e75fdef1250e5c04fcf7
Authentihash SHA256
e44bb3ab324b727873079b55fa804ad1d35d156ea5a5c891808adc99e00bb713
Machine
AMD64
Version
2.2.32.0
Publisher
FUJITSU CLIENT COMPUTING LIMITED

Recorded command

sc.exe create FBIOSDRV type= kernel binPath= C:\\windows\\temp\\fbiosdrv.sys && sc.exe start FBIOSDRV

Execute code in the kernel · Privileges: Administrator · OS: Windows

Research & references

Acknowledgement: fluffycats31 @fluffycats31