Home

Description

An out-of-bounds write vulnerability exists in the cv_upgrade_sensor_firmware functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault 3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an out-of-bounds write. An attacker can issue an API call to trigger this vulnerability.

PUBLISHED Reserved 2025-02-06 | Published 2025-06-13 | Updated 2026-02-26 | Assigner talos




HIGH: 8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-787 Out-of-bounds Write

Product status

Default status
unaffected

NA
affected

Default status
unaffected

Any version before 5.15.10.14
affected

Default status
unaffected

Any version before 6.2.26.36
affected

Credits

Discovered by Philippe Laulheret of Cisco Talos. finder

References

www.talosintelligence.com/...ability_reports/TALOS-2025-2137

www.dell.com/support/kbdoc/en-us/000276106/dsa-2025-053

cve.org (CVE-2025-25050)

nvd.nist.gov (CVE-2025-25050)

Download JSON