6.9
Medium
CVE-2025-29988 Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability
Description
Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
CVSS 3.1 detail
Vector CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:HExploitable with local access to the machine, with an administrator account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- High
- Interaction
- Required
- Scope
- Changed
- Confidentiality
- Low
- Integrity
- Low
- Availability
- High
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Client Platform BIOS 2.24 | earliest → < 2.24.0 | 2.24.0 |
| Dell Client Platform BIOS 2.1 | earliest → < 2.1.5 | 2.1.5 |
| Dell Client Platform BIOS 1.35 | earliest → < 1.35.0 | 1.35.0 |
| Dell Client Platform BIOS 1.33 | earliest → < 1.33.0 | 1.33.0 |
Other CVEs of Dell Client Platform BIOS
The 7 CVEs of Dell Client Platform BIOS →
CVE-2025-29989
Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability
3.1
Low
CVE-2024-52541
Dell Client Platform BIOS contains a Weak Authentication vulnerability
8.2
High
CVE-2024-47238
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High
CVE-2024-52537
Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability
6.3
Medium