7.5
High
CVE-2024-32859 Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
Description
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CPG BIOS 2.18 | earliest → < 2.18.0 | 2.18.0 |
| CPG BIOS 2.8 | earliest → < 2.8.0 | 2.8.0 |
| CPG BIOS 2.7 | earliest → < 2.7.0 | 2.7.0 |
| CPG BIOS 2.6 | earliest → < 2.6.0 | 2.6.0 |
| CPG BIOS 1.19 | earliest → < 1.19.0 | 1.19.0 |
| CPG BIOS 1.16 | earliest → < 1.16.0 | 1.16.0 |
| CPG BIOS 1.13 | earliest → < 1.13.0 | 1.13.0 |
| CPG BIOS 1.12 | earliest → < 1.12.0 | 1.12.0 |
| CPG BIOS 1.1 | earliest → < 1.1.25 | 1.1.25 |
Show the 12 other branches Hide the 12 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| CPG BIOS 1.0 | earliest → < 1.0.24 | 1.0.24 |
| alienware_aurora_r15_amd_firmware 1.13 | earliest → < 1.13.0 | 1.13.0 |
| alienware_aurora_r16_firmware 2.7 | earliest → < 2.7.0 | 2.7.0 |
| alienware_aurora_r10_firmware 2.8 | earliest → < 2.8.0 | 2.8.0 |
| alienware_aurora_r11_firmware 1.0 | earliest → < 1.0.24 | 1.0.24 |
| alienware_aurora_r12_firmware 1.1 | earliest → < 1.1.25 | 1.1.25 |
| alienware_aurora_r13_firmware 1.19 | earliest → < 1.19.0 | 1.19.0 |
| alienware_aurora_r14_ryzen_edition_firmware 2.18 | earliest → < 2.18.0 | 2.18.0 |
| alienware_aurora_r15_firmware 1.12 | earliest → < 1.12.0 | 1.12.0 |
| inspiron_3502_firmware 1.16 | earliest → < 1.16.0 | 1.16.0 |
| xps_8950_firmware 1.19 | earliest → < 1.19.0 | 1.19.0 |
| xps_8960_firmware 2.6 | earliest → < 2.6.0 | 2.6.0 |
Other CVEs of CPG BIOS
The 110 CVEs of CPG BIOS →
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability
5.1
Medium
CVE-2024-32855
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component
3.8
Low
CVE-2024-32860
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High
CVE-2024-32858
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High