CVE-2022-34399: Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this…

low2.3CVSS 3.1

AVLACLPRHUINSUCLINAN

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
dell	alienware_m15_a6_firmware	< 1.4.3	1.4.3
dell	alienware_m15_ryzen_edition_r5_firmware	< 1.8.0	1.8.0
dell	alienware_m17_ryzen_edition_r5_firmware	< 1.4.3	1.4.3
dell	cpg_bios	< 1.2.2	1.2.2
dell	g15_5515_firmware	< 1.8.0	1.8.0
dell	g15_5525_firmware	< 1.4.3	1.4.3
dell	inspiron_3505_firmware	< 1.9.0	1.9.0
dell	inspiron_3515_firmware	< 1.9.0	1.9.0
dell	inspiron_3525_firmware	< 1.5.0	1.5.0
dell	inspiron_3585_firmware	< 1.10.0	1.10.0
dell	inspiron_3595_firmware	< 1.5.0	1.5.0
dell	inspiron_3785_firmware	< 1.10.0	1.10.0
dell	vostro_3405_firmware	< 1.9.0	1.9.0
dell	vostro_3425_firmware	< 1.5.0	1.5.0
dell	vostro_3515_firmware	< 1.9.0	1.9.0
dell	vostro_3525_firmware	< 1.5.0	1.5.0