---
id: CVE-2025-51619
title: >-
  A vulnerability in the Thesycon DPC Latency Checker driver (dpc.sys) thru
  1.4.0 allows local unprivileged users to cause a denial-of-service (BSOD)
  condition on Windows systems
summary: >-
  A vulnerability in the Thesycon DPC Latency Checker driver (dpc.sys) thru
  1.4.0 allows local unprivileged users to cause a denial-of-service (BSOD)
  condition on Windows systems. The driver exposes an IOCTL interface
  (0x81772008) that acc…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-20
published: '2026-09-09'
updated: '2026-09-09'
sourceUpdated: '2026-09-09T20:11:44.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-51619'
references:
  - url: 'https://github.com/3a1/Vulns/tree/main/CVE-2025-51619'
    label: cve@mitre.org
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-09T18:56:47.206700Z'
ingestedAt: '2026-09-09T19:19:51.827Z'
epss: 0.00098
epssPercentile: 0.00732
---

## Overview

A vulnerability in the Thesycon DPC Latency Checker driver (dpc.sys) thru 1.4.0 allows local unprivileged users to cause a denial-of-service (BSOD) condition on Windows systems. The driver exposes an IOCTL interface (0x81772008) that accepts user-controlled input without validating pointers before passing them to kernel APIs. Specifically, it dereferences a user-supplied pointer and uses the resulting value in a call to ExSetTimerResolution, leading to an arbitrary kernel memory access. Exploiting this flaw results in a system crash.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.