high7.5
CVE-2022-34401
Dell BIOS contains a stack based buffer overflow vulnerability.
Impact
Dell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter in order to gain arbitrary code execution in SMRAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware M15 A6 Firmware | before 1.4.3 |
| Dell | Alienware M17 R5 Firmware | before 1.4.3 |
| Dell | G15 5525 Firmware | before 1.4.3 |