Advantech TP-3250 Printer Driver up to 0.3.9200.20789 DrvUI_x64_ADVANTECH.dll DocumentPropertiesW dmDriverExtra buffer overflow

Summaryinfo

A vulnerability categorized as critical has been discovered in Advantech TP-3250 Printer Driver up to 0.3.9200.20789. The affected element is the function DocumentPropertiesW in the library DrvUI_x64_ADVANTECH.dll. Executing a manipulation of the argument dmDriverExtra can lead to buffer overflow. This vulnerability is handled as CVE-2025-63701. It is possible to launch the attack on the local host. There is not any exploit available.

Detailsinfo

A vulnerability has been found in Advantech TP-3250 Printer Driver up to 0.3.9200.20789 and classified as critical. This vulnerability affects the function DocumentPropertiesW in the library DrvUI_x64_ADVANTECH.dll. The manipulation of the argument dmDriverExtra with an unknown input leads to a buffer overflow vulnerability. The CWE definition for the vulnerability is CWE-120. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

A heap corruption vulnerability exists in the Advantech TP-3250 printer driver's DrvUI_x64_ADVANTECH.dll (v0.3.9200.20789) when DocumentPropertiesW() is called with a valid dmDriverExtra value but an undersized output buffer. The driver incorrectly assumes the output buffer size matches the input buffer size, leading to invalid memory operations and heap corruption. This vulnerability can cause denial of service through application crashes and potentially lead to code execution in user space. Local access is required to exploit this vulnerability.

The advisory is shared for download at neurowinter.com. This vulnerability was named CVE-2025-63701 since 10/27/2025. The exploitation appears to be easy. The attack needs to be approached locally. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 11/15/2025).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-197648). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Printing Software

Vendor

• Advantech

Name

• TP-3250 Printer Driver

Version

• 0.3.9200.20789

License

• commercial

Website

• Vendor: https://www.advantech.com/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion