high7.5
CVE-2022-34403
Dell BIOS contains a Stack based buffer overflow vulnerability.
Impact
Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware M15 R6 Firmware | before 1.17.0 |
| Dell | Alienware M15 R7 Firmware | before 1.4.3 |
| Dell | Alienware M15 Ryzen Edition R5 Firmware | before 1.8.0 |
| Dell | Alienware M17 R5 Amd Firmware | before 1.4.3 |
| Dell | G15 5510 Firmware | before 1.16.0 |
| Dell | G15 5511 Firmware | before 1.18.0 |
| Dell | G15 5515 Firmware | before 1.8.0 |
| Dell | G15 5525 Firmware | before 1.4.3 |
| Dell | G5 Se 5505 Firmware | before 1.13.0 |
| Dell | Inspiron 14 5410 2-In-1 Firmware | before 2.15.2 |
| Dell | Inspiron 15 3511 Firmware | before 1.18.2 |
| Dell | Inspiron 3195 2-In-1 Firmware | before 1.6.0 |