CVE-2024-32855

published 2024-06-25

CVE-2024-32855: Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access…

medium 4.4 CVSS 3.1

AV L AC L PR H UI N S U C N I H A N

Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Affected

90 ranges · showing 25

Vendor	Product	Version range	Fixed in
dell	cpg_bios	>= N/A < 1.30.0	1.30.0
dell	cpg_bios	>= N/A < 1.26.0	1.26.0
dell	cpg_bios	>= N/A < 1.34.0	1.34.0
dell	cpg_bios	>= N/A < 1.28.0	1.28.0
dell	cpg_bios	>= N/A < 1.25.0	1.25.0
dell	cpg_bios	>= N/A < 1.24.0	1.24.0
dell	cpg_bios	>= N/A < 1.31.0	1.31.0
dell	cpg_bios	>= N/A < 1.36.0	1.36.0
dell	cpg_bios	>= N/A < 1.35.0	1.35.0
dell	cpg_bios	>= N/A < 1.29.0	1.29.0
dell	cpg_bios	>= N/A < 1.32.0	1.32.0
dell	cpg_bios	>= N/A < 1.33.0	1.33.0
dell	cpg_bios	>= N/A < 1.50.0	1.50.0
dell	cpg_bios	>= N/A < 1.37.0	1.37.0
dell	cpg_bios	>= N/A < 1.38.0	1.38.0
dell	cpg_bios	>= N/A < 1.31.8	1.31.8
dell	inspiron_3480_firmware	< 1.30.0	1.30.0
dell	inspiron_3580_firmware	< 1.30.0	1.30.0
dell	latitude_3120_firmware	< 1.26.0	1.26.0
dell	latitude_3190_2-in-1_firmware	< 1.34.0	1.34.0
dell	latitude_3190_firmware	< 1.34.0	1.34.0
dell	latitude_3300_firmware	< 1.28.0	1.28.0
dell	latitude_3310_2-in-1_firmware	< 1.24.0	1.24.0
dell	latitude_3310_firmware	< 1.25.0	1.25.0
dell	latitude_3390_2-in-1_firmware	< 1.31.0	1.31.0

CWE-787