← CVE Intelligence

CVE-2025-24922

Dell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerability PUBLISHED

Description (CNA)

A stack-based buffer overflow vulnerability exists in the securebio_identify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted malicious cv_object can lead to a arbitrary code execution. An attacker can issue an API call to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
Broadcom / BCM5820Xaffected NA
Dell / ControlVault3affected 0 before 5.15.10.14
Dell / ControlVault3 Plusaffected 0 before 6.2.26.36

CWE

CWE-121

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.