CVE-2024-22448

State: Published
Severity: 4.7 Medium
Published: Apr 10, 2024
Updated: Aug 1, 2024
Reserved: Jan 10, 2024

Description

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H	dell

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
CPG BIOSDell	before 1.29.0Affected before 1.16.0Affected before 1.13.0Affected before 1.28.0Affected before 1.14.0Affected before 1.31.0Affected before 1.31.1Affected before 1.31.2Affected before 1.31.3Affected before 1.31.4Affected before 1.31.5Affected before 1.31.6Affected before 1.31.7Affected before 1.31.8Affected before 1.31.9Affected before 1.31.10Affected before 1.31.11Affected before 1.31.12Affected before 1.31.13Affected before 1.31.14Affected before 1.31.15Affected before 1.31.16Affected

Product

Versions

CPG BIOSDell

before 1.29.0Affected
before 1.16.0Affected
before 1.13.0Affected
before 1.28.0Affected
before 1.14.0Affected
before 1.31.0Affected
before 1.31.1Affected
before 1.31.2Affected
before 1.31.3Affected
before 1.31.4Affected
before 1.31.5Affected
before 1.31.6Affected
before 1.31.7Affected
before 1.31.8Affected
before 1.31.9Affected
before 1.31.10Affected
before 1.31.11Affected
before 1.31.12Affected
before 1.31.13Affected
before 1.31.14Affected
before 1.31.15Affected
before 1.31.16Affected

References

https://www.dell.com/support/kbdoc/en-us/000221744/dsa-2024-066vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.