CVE-2024-22448

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-10 · updated 2026-06-17
Weakness: CWE-787

Description

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.

Affected products

Dell Alienware M15 R6 Firmware: before 1.29.0 — fixed in 1.29.0
Dell Alienware M15 R7 Firmware: before 1.24.0 — fixed in 1.24.0
Dell Alienware M16 R1 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Alienware M18 R1 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Alienware M18 R2 Firmware: before 1.4.4 — fixed in 1.4.4
Dell Alienware X14 R2 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Alienware X16 R1 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Alienware X16 R2 Firmware: before 1.2.0 — fixed in 1.2.0
Dell Chengming 3900 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Chengming 3910 Firmware: before 1.13.1 — fixed in 1.13.1
Dell Chengming 3911 Firmware: before 1.13.1 — fixed in 1.13.1
Dell Chengming 3990 Firmware: before 1.27.0 — fixed in 1.27.0
Dell Chengming 3991 Firmware: before 1.27.0 — fixed in 1.27.0
Dell G15 5510 Firmware: before 1.24.0 — fixed in 1.24.0
Dell G15 5511 Firmware: before 1.28.0 — fixed in 1.28.0
Dell G15 5520 Firmware: before 1.24.0 — fixed in 1.24.0
Dell G15 5530 Firmware: before 1.14.0 — fixed in 1.14.0
Dell G16 7620 Firmware: before 1.24.0 — fixed in 1.24.0
Dell G16 7630 Firmware: before 1.14.0 — fixed in 1.14.0
Dell G3 3500 Firmware: before 1.29.0 — fixed in 1.29.0
Dell G5 5500 Firmware: before 1.29.0 — fixed in 1.29.0
Dell G7 7500 Firmware: before 1.31.0 — fixed in 1.31.0
Dell G7 7700 Firmware: before 1.31.0 — fixed in 1.31.0
Dell Inspiron 13 5310 Firmware: before 2.27.0 — fixed in 2.27.0
Dell Inspiron 13 5320 Firmware: before 1.18.0 — fixed in 1.18.0
Dell Inspiron 13 5330 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Inspiron 14 5410 Firmware: before 2.26.0 — fixed in 2.26.0
Dell Inspiron 14 5418 Firmware: before 2.26.0 — fixed in 2.26.0
Dell Inspiron 14 5420 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Inspiron 14 5430 Firmware: before 1.13.0 — fixed in 1.13.0

How to fix

Upgrade to a fixed version: Dell Alienware M15 R6 Firmware 1.29.0; Dell Alienware M15 R7 Firmware 1.24.0; Dell Alienware M16 R1 Firmware 1.16.0; Dell Alienware M18 R1 Firmware 1.16.0; Dell Alienware M18 R2 Firmware 1.4.4; Dell Alienware X14 R2 Firmware 1.13.0; Dell Alienware X16 R1 Firmware 1.13.0; Dell Alienware X16 R2 Firmware 1.2.0; Dell Chengming 3900 Firmware 1.22.0; Dell Chengming 3910 Firmware 1.13.1; Dell Chengming 3911 Firmware 1.13.1; Dell Chengming 3990 Firmware 1.27.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-22448 or the next vulnerability affects your stack