low2.3
CVE-2022-31222
Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability.
Impact
Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by consuming excess memory in order to cause the application to crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Chengming 3900 Firmware | before 1.1.66 |
| Dell | Inspiron 14 Plus 7420 Firmware | before 1.2.0 |
| Dell | Inspiron 16 Plus 7620 Firmware | before 1.2.0 |
| Dell | Inspiron 3910 Firmware | before 1.1.66 |
| Dell | Inspiron 5320 Firmware | before 1.1.0 |
| Dell | Inspiron 5420 Firmware | before 1.4.1 |
| Dell | Inspiron 5620 Firmware | before 1.4.1 |
| Dell | Inspiron 7420 Firmware | before 1.3.0 |
| Dell | Inspiron 7620 Firmware | before 1.3.0 |
| Dell | Optiplex 3000 Firmware | before 1.1.66 |
| Dell | Optiplex 3000 Thin Client Firmware | before 1.0.7 |
| Dell | Optiplex 5000 Firmware | before 1.3.62 |