CVE-2022-34400

HIGH

Dell Alienware M15 R6 Firmware < 1.17.0 - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM.

References (1)

Core 1

Scores

CVSS v3 7.1
EPSS 0.0005
EPSS Percentile 15.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-122 CWE-787
Status published
Products (50)
dell/alienware_m15_r6_firmware < 1.17.0
dell/alienware_m15_r7_firmware < 1.4.3
dell/alienware_m15_ryzen_edition_r5_firmware < 1.8.0
dell/alienware_m17_r5_amd_firmware < 1.4.3
dell/g15_5510_firmware < 1.16.0
dell/g15_5511_firmware < 1.18.0
dell/g15_5515_firmware < 1.8.0
dell/g15_5525_firmware < 1.4.3
dell/g5_se_5505_firmware < 1.13.0
dell/inspiron_14_5410_2-in-1_firmware < 2.15.2
... and 40 more
Published Feb 01, 2023
Tracked Since Feb 18, 2026