Home

Description

Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 4 (`WBIO_USH_ADD_RECORD`) and with an invalid `SendBufferSize`.

PUBLISHED Reserved 2025-04-15 | Published 2025-11-17 | Updated 2025-11-19 | Assigner talos




HIGH: 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Problem types

CWE-805 - Buffer Access with Incorrect Length Value

Product status

Default status
unaffected

NA
affected

Default status
unaffected

Any version before 5.15.14.19
affected

Default status
unaffected

Any version before 6.2.36.47
affected

Credits

Discovered by Philippe Laulheret of Cisco Talos. finder

References

www.dell.com/support/kbdoc/en-us/000326061/dsa-2025-228

talosintelligence.com/vulnerability_reports/TALOS-2025-2175

cve.org (CVE-2025-36463)

nvd.nist.gov (CVE-2025-36463)

Download JSON