CVE-2022-34403

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-01 · updated 2026-06-17
Weakness: CWE-121

Description

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.

Affected products

Dell Alienware M15 R6 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Alienware M15 R7 Firmware: before 1.4.3 — fixed in 1.4.3
Dell Alienware M15 Ryzen Edition R5 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Alienware M17 R5 Amd Firmware: before 1.4.3 — fixed in 1.4.3
Dell G15 5510 Firmware: before 1.16.0 — fixed in 1.16.0
Dell G15 5511 Firmware: before 1.18.0 — fixed in 1.18.0
Dell G15 5515 Firmware: before 1.8.0 — fixed in 1.8.0
Dell G15 5525 Firmware: before 1.4.3 — fixed in 1.4.3
Dell G5 Se 5505 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Inspiron 14 5410 2-In-1 Firmware: before 2.15.2 — fixed in 2.15.2
Dell Inspiron 15 3511 Firmware: before 1.18.2 — fixed in 1.18.2
Dell Inspiron 3195 2-In-1 Firmware: before 1.6.0 — fixed in 1.6.0
Dell Inspiron 3275 Firmware: before 1.9.2 — fixed in 1.9.2
Dell Inspiron 3475 Firmware: before 1.9.2 — fixed in 1.9.2
Dell Inspiron 3505 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Inspiron 3515 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Inspiron 3525 Firmware: before 1.5.0 — fixed in 1.5.0
Dell Inspiron 3585 Firmware: before 1.10.0 — fixed in 1.10.0
Dell Inspiron 3595 Firmware: before 1.5.0 — fixed in 1.5.0
Dell Inspiron 3785 Firmware: before 1.10.0 — fixed in 1.10.0
Dell Inspiron 3891 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 5310 Firmware: before 2.15.0 — fixed in 2.15.0
Dell Inspiron 5405 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Inspiron 5410 Firmware: before 2.14.0 — fixed in 2.14.0
Dell Inspiron 5415 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Inspiron 5425 Firmware: before 1.5.0 — fixed in 1.5.0
Dell Inspiron 5485 2-In-1 Firmware: before 2.11.0 — fixed in 2.11.0
Dell Inspiron 5485 Firmware: before 2.11.0 — fixed in 2.11.0
Dell Inspiron 5505 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Inspiron 5510 Firmware: before 2.15.2 — fixed in 2.15.2

How to fix

Upgrade to a fixed version: Dell Alienware M15 R6 Firmware 1.17.0; Dell Alienware M15 R7 Firmware 1.4.3; Dell Alienware M15 Ryzen Edition R5 Firmware 1.8.0; Dell Alienware M17 R5 Amd Firmware 1.4.3; Dell G15 5510 Firmware 1.16.0; Dell G15 5511 Firmware 1.18.0; Dell G15 5515 Firmware 1.8.0; Dell G15 5525 Firmware 1.4.3; Dell G5 Se 5505 Firmware 1.13.0; Dell Inspiron 14 5410 2-In-1 Firmware 2.15.2; Dell Inspiron 15 3511 Firmware 1.18.2; Dell Inspiron 3195 2-In-1 Firmware 1.6.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-34403 or the next vulnerability affects your stack