CVE-2024-32855

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
4.4MEDIUM
EPSS
0.1%
top 81.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
75
Dell CPG BiosDell Inspiron 3480 FirmwareDell Inspiron 3580 Firmware+72 more
Timeline
PublishedJun 25

Description

Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:LExploitability: 0.3 | Impact: 3.4

Affected Packages75 packages

▶CVEListV5dell/cpg_biosN/A — 1.30.0+15

🔴Vulnerability Details

2
GHSA
GHSA-57q2-23pw-7c8w: Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component↗2024-06-25
▶
CVEList
CVE-2024-32855: Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component↗2024-06-25
▶
CVE-2024-32855 (MEDIUM CVSS 4.4) | Dell Client Platform BIOS contains | cvebase.io