7.5
High
CVE-2024-32860 Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
Description
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CPG BIOS 2.18 | earliest → < 2.18.0 | 2.18.0 |
| CPG BIOS 2.7 | earliest → < 2.7.0 | 2.7.0 |
| CPG BIOS 2.6 | earliest → < 2.6.0 | 2.6.0 |
| CPG BIOS 1.19 | earliest → < 1.19.0 | 1.19.0 |
| CPG BIOS 1.16 | earliest → < 1.16.0 | 1.16.0 |
| CPG BIOS 1.13 | earliest → < 1.13.0 | 1.13.0 |
| CPG BIOS 1.12 | earliest → < 1.12.0 | 1.12.0 |
| CPG BIOS 1.1 | earliest → < 1.1.25 | 1.1.25 |
| CPG BIOS 1.0 | earliest → < 1.0.24 | 1.0.24 |
Show the 9 other branches Hide the 9 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| cpg_bios 2.18 | earliest → < 2.18.0 | 2.18.0 |
| cpg_bios 2.7 | earliest → < 2.7.0 | 2.7.0 |
| cpg_bios 2.6 | earliest → < 2.6.0 | 2.6.0 |
| cpg_bios 1.19 | earliest → < 1.19.0 | 1.19.0 |
| cpg_bios 1.16 | earliest → < 1.16.0 | 1.16.0 |
| cpg_bios 1.13 | earliest → < 1.13.0 | 1.13.0 |
| cpg_bios 1.12 | earliest → < 1.12.0 | 1.12.0 |
| cpg_bios 1.1 | earliest → < 1.1.25 | 1.1.25 |
| cpg_bios 1.0 | earliest → < 1.0.24 | 1.0.24 |
Other CVEs of CPG BIOS
The 110 CVEs of CPG BIOS →
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability
5.1
Medium
CVE-2024-32855
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component
3.8
Low
CVE-2024-32858
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High
CVE-2024-32859
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High