CVE-2023-39251

MEDIUM

Dell BIOS < 1.27.0 - Memory Corruption via Improper Input Validation

Title source: llm
STIX 2.1

Description

Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.

References (1)

Core 1
Core References

Scores

CVSS v3 6.7
EPSS 0.0003
EPSS Percentile 10.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L

Details

CWE
CWE-20
Status published
Products (13)
dell/inspiron_7510_firmware < 1.20.0
dell/inspiron_7610_firmware < 1.20.0
dell/latitude_5430_rugged_firmware < 1.23.0
dell/latitude_5521_firmware < 1.27.0
dell/latitude_7330_rugged_firmware < 1.23.0
dell/precision_3561_firmware < 1.27.0
dell/precision_5560_firmware < 1.25.0
dell/precision_5760_firmware < 1.24.0
dell/precision_7560_firmware < 1.27.0
dell/precision_7760_firmware < 1.27.0
... and 3 more
Published Dec 22, 2023
Tracked Since Feb 18, 2026