medium4.7
CVE-2024-28970
Dell Client BIOS contains an Out-of-bounds Write vulnerability.
Impact
Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Vostro 5502 Firmware | before 1.30.0 |
| Dell | Vostro 5402 Firmware | before 1.30.0 |
| Dell | Precision 3660 Firmware | before 2.14.0 |
| Dell | Inspiron 5509 Firmware | before 1.30.0 |
| Dell | Inspiron 5502 Firmware | before 1.30.0 |
| Dell | Inspiron 5409 Firmware | before 1.30.0 |
| Dell | Inspiron 5402 Firmware | before 1.30.0 |
| Dell | Inspiron 27 7720 All-In-One Firmware | before 1.11.0 |
| Dell | Inspiron 24 5420 All-In-One Firmware | before 1.11.0 |
| Dell | Inspiron 16 Plus 7640 Firmware | before 1.6.0 |
| Dell | Inspiron 16 7640 2-In-1 Firmware | before 1.4.0 |
| Dell | Inspiron 14 Plus 7440 Firmware | before 1.6.0 |