CVE catalog

CVE-2025-32776

openrazer: CVE-2025-32776

Severity: Medium
Published: Apr 15, 2025, 5:15:49 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.19% · Oct 25, 2026

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the `matrix_custom_frame` file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will be written into the RGB arguments which will be sent to the USB device. This issue has been patched in v3.10.2.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	openrazer	sid	`3.12.4+dfsg-1`	fixed
Debian	openrazer	forky	`3.12.4+dfsg-1`	fixed
Debian	openrazer	trixie	`3.10.2+dfsg-1`	fixed
Debian	openrazer	bookworm	`3.5.1+dfsg-2+deb12u1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	openrazer	source	sid	`3.10.2+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	openrazer	source	forky	`3.10.2+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	openrazer	source	trixie	`3.10.2+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	openrazer	source	bookworm	`3.5.1+dfsg-2+deb12u1`	not yet assigned	Not reported	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[openrazer-daemon]Fixed
Source package: [openrazer]
Details (2)
- 3.5.1+dfsg-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.5.1+dfsg-2+deb12u1
  dsa · openrazer · debian · bookworm; dsa · openrazer · debian · 12
- 3.5.1+dfsg-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.5.1+dfsg-2+deb12u1
  dsa · openrazer · debian · bookworm; dsa · openrazer · debian · 12
[openrazer-doc]Fixed
Source package: [openrazer]
Details (2)
- 3.5.1+dfsg-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.5.1+dfsg-2+deb12u1
  dsa · openrazer · debian · bookworm; dsa · openrazer · debian · 12
- 3.5.1+dfsg-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.5.1+dfsg-2+deb12u1
  dsa · openrazer · debian · bookworm; dsa · openrazer · debian · 12
[openrazer-driver-dkms]Fixed
Source package: [openrazer]
Details (2)
- 3.5.1+dfsg-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.5.1+dfsg-2+deb12u1
  dsa · openrazer · debian · bookworm; dsa · openrazer · debian · 12
- 3.5.1+dfsg-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.5.1+dfsg-2+deb12u1
  dsa · openrazer · debian · bookworm; dsa · openrazer · debian · 12
[openrazer-meta]Fixed
Source package: [openrazer]
Details (2)
- 3.5.1+dfsg-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.5.1+dfsg-2+deb12u1
  dsa · openrazer · debian · bookworm; dsa · openrazer · debian · 12
- 3.5.1+dfsg-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.5.1+dfsg-2+deb12u1
  dsa · openrazer · debian · bookworm; dsa · openrazer · debian · 12
[python3-openrazer]Fixed
Source package: [openrazer]
Details (2)
- 3.5.1+dfsg-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.5.1+dfsg-2+deb12u1
  dsa · openrazer · debian · bookworm; dsa · openrazer · debian · 12
- 3.5.1+dfsg-2+deb12u1 · all · bookworm
  Fixed · Fixed: 3.5.1+dfsg-2+deb12u1
  dsa · openrazer · debian · bookworm; dsa · openrazer · debian · 12

[Debian 13 (Trixie)]

[openrazer-daemon]Fixed
Source package: [openrazer]
Details (2)
- 3.10.2+dfsg-1 · all · trixie
  Fixed · Fixed: 3.10.2+dfsg-1
  dsa · openrazer · debian · 13
- 3.10.2+dfsg-1 · all · trixie
  Fixed · Fixed: 3.10.2+dfsg-1
  dsa · openrazer · debian · 13
[openrazer-doc]Fixed
Source package: [openrazer]
Details (2)
- 3.10.2+dfsg-1 · all · trixie
  Fixed · Fixed: 3.10.2+dfsg-1
  dsa · openrazer · debian · 13
- 3.10.2+dfsg-1 · all · trixie
  Fixed · Fixed: 3.10.2+dfsg-1
  dsa · openrazer · debian · 13
[openrazer-driver-dkms]Fixed
Source package: [openrazer]
Details (2)
- 3.10.2+dfsg-1 · all · trixie
  Fixed · Fixed: 3.10.2+dfsg-1
  dsa · openrazer · debian · 13
- 3.10.2+dfsg-1 · all · trixie
  Fixed · Fixed: 3.10.2+dfsg-1
  dsa · openrazer · debian · 13
[openrazer-meta]Fixed
Source package: [openrazer]
Details (2)
- 3.10.2+dfsg-1 · all · trixie
  Fixed · Fixed: 3.10.2+dfsg-1
  dsa · openrazer · debian · 13
- 3.10.2+dfsg-1 · all · trixie
  Fixed · Fixed: 3.10.2+dfsg-1
  dsa · openrazer · debian · 13
[python3-openrazer]Fixed
Source package: [openrazer]
Details (2)
- 3.10.2+dfsg-1 · all · trixie
  Fixed · Fixed: 3.10.2+dfsg-1
  dsa · openrazer · debian · 13
- 3.10.2+dfsg-1 · all · trixie
  Fixed · Fixed: 3.10.2+dfsg-1
  dsa · openrazer · debian · 13

Observed: Oct 24, 2026, 11:08:11 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]