Skip to content
Sign in
8.4 High

CVE-2025-24311 An out-of-bounds read vulnerability exists in the cv_send_blockdata functionality of Dell ControlVault3 prior to…

Description

An out-of-bounds read vulnerability exists in the cv_send_blockdata functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an information leak. An attacker can issue an API call to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
BCM5820X Versions not published
ControlVault3 5.15 earliest → < 5.15.10.14 5.15.10.14
ControlVault3 Plus 6.2 earliest → < 6.2.26.36 6.2.26.36

Other CVEs of BCM5820X

The 13 CVEs of BCM5820X →
CVE-2025-31649 A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior… 8.7 High CVE-2025-31361 A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell… 8.7 High CVE-2025-36463 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter… 7.3 High CVE-2025-36462 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter… 7.3 High
Track this CVE