Aller au contenu
en Se connecter
7.3 Élevée

CVE-2025-36460 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter…

Description

Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 2 (`WBIO_USH_GET_IDENTITY`) with an improper `ReceiveBuferSize` value.

Produits et versions touchés

Produit Versions touchées Corrigé en
BCM5820X Versions non publiées
ControlVault3 5.15 premières → < 5.15.14.19 5.15.14.19
ControlVault3 Plus 6.2 premières → < 6.2.36.47 6.2.36.47

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de BCM5820X

Les 13 CVE de BCM5820X →
CVE-2025-31649 A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior… 8.7 Élevée CVE-2025-31361 A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell… 8.7 Élevée CVE-2025-36463 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter… 7.3 Élevée CVE-2025-36462 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter… 7.3 Élevée
Suivre cette CVE