high7.5
CVE-2022-26860
Dell BIOS versions contain a stack-based buffer overflow vulnerability.
Impact
Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware M15 R6 Firmware | before 1.8.0 |
| Dell | Chengming 3980 Firmware | before 2.21.0 |
| Dell | Chengming 3988 Firmware | before 1.9.0 |
| Dell | Chengming 3990 Firmware | before 1.8.2 |
| Dell | Chengming 3991 Firmware | before 1.8.2 |
| Dell | G15 5510 Firmware | before 1.8.0 |
| Dell | G15 5511 Firmware | before 1.9.0 |
| Dell | G3 15 3590 Firmware | before 1.16.0 |
| Dell | G3 3500 Firmware | before 1.12.0 |
| Dell | G3 3579 Firmware | before 1.19.0 |
| Dell | G5 15 5587 Firmware | before 1.19.0 |
| Dell | G5 15 5590 Firmware | before 1.18.0 |