CVE-2025-32776

Summary

CVE-2025-32776 is a vulnerability affecting the OpenRazer open-source software used to control Razer device lighting and features on GNU/Linux systems. An attacker can exploit this vulnerability by writing maliciously crafted data to the `matrix_custom_frame` file. This data causes the custom kernel driver to read excessive bytes from user space, resulting in the attacker's data being written into the RGB arguments. Subsequently, these arguments are sent to the USB device, potentially leading to unintended device behavior or information disclosure. The issue has been addressed in OpenRazer version 3.10.2.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.