CVE-2022-31226

CWE-121 — Stack-based Buffer OverflowCWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 81.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
26
Dell CPG BiosDell Chengming 3900 FirmwareDell Inspiron 14 Plus 7420 Firmware+23 more
Timeline
PublishedSep 12
Latest updateSep 13

Description

Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could potentially exploit this vulnerability by sending excess data to a function in order to gain arbitrary code execution on the system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages26 packages

▶CVEListV5dell/cpg_biosunspecified — 21Q4 platforms

Patches

Patch: www.dell.com ↗Patch: www.dell.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-93xc-8f45-qxx3: Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability↗2022-09-13
▶
CVEList
CVE-2022-31226: Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability↗2022-09-12
▶
CVE-2022-31226 (HIGH CVSS 7.8) | Dell BIOS versions contain a Stack- | cvebase.io