Skip to content
Sign in
8.8 High

CVE-2025-24922 A stack-based buffer overflow vulnerability exists in the securebio_identify functionality of Dell ControlVault3…

Description

A stack-based buffer overflow vulnerability exists in the securebio_identify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted malicious cv_object can lead to a arbitrary code execution. An attacker can issue an API call to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
BCM5820X Versions not published
ControlVault3 5.15 earliest → < 5.15.10.14 5.15.10.14
ControlVault3 Plus 6.2 earliest → < 6.2.26.36 6.2.26.36

Other CVEs of BCM5820X

The 13 CVEs of BCM5820X →
CVE-2025-31649 A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior… 8.7 High CVE-2025-31361 A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell… 8.7 High CVE-2025-36463 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter… 7.3 High CVE-2025-36462 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter… 7.3 High
Track this CVE