CVE-2024-32856

Severity: medium (CVSS 6.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-06-13 · updated 2026-06-17
Weakness: CWE-20

Description

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Affected products

Dell Alienware Area 51M R2 Firmware: before 1.26.0 — fixed in 1.26.0
Dell Alienware Aurora R10 Firmware: before 2.8.0 — fixed in 2.8.0
Dell Alienware Aurora R11 Firmware: before 1.0.24 — fixed in 1.0.24
Dell Alienware Aurora R12 Firmware: before 1.1.25 — fixed in 1.1.25
Dell Alienware Aurora R13 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Alienware Aurora R15 Amd Firmware: before 1.13.0 — fixed in 1.13.0
Dell Alienware Aurora R15 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Alienware Aurora Ryzen Edition R14 Firmware: before 2.18.0 — fixed in 2.18.0
Dell Alienware M15 R3 Firmware: before 1.27.0 — fixed in 1.27.0
Dell Alienware M15 R4 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Alienware M17 R3 Firmware: before 1.27.0 — fixed in 1.27.0
Dell Alienware M17 R4 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Alienware X14 Firmware: before 1.18.0 — fixed in 1.18.0
Dell Alienware X15 R1 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Alienware X15 R2 Firmware: before 1.20.0 — fixed in 1.20.0
Dell Alienware X17 R1 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Alienware X17 R2 Firmware: before 1.20.0 — fixed in 1.20.0
Dell Aurora R16 Firmware: before 2.7.0 — fixed in 2.7.0
Dell Inspiron 15 3510 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 15 3521 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Inspiron 3502 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Xps 8950 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Xps 8960 Firmware: before 2.6.0 — fixed in 2.6.0

How to fix

Upgrade to a fixed version: Dell Alienware Area 51M R2 Firmware 1.26.0; Dell Alienware Aurora R10 Firmware 2.8.0; Dell Alienware Aurora R11 Firmware 1.0.24; Dell Alienware Aurora R12 Firmware 1.1.25; Dell Alienware Aurora R13 Firmware 1.19.0; Dell Alienware Aurora R15 Amd Firmware 1.13.0; Dell Alienware Aurora R15 Firmware 1.12.0; Dell Alienware Aurora Ryzen Edition R14 Firmware 2.18.0; Dell Alienware M15 R3 Firmware 1.27.0; Dell Alienware M15 R4 Firmware 1.21.0; Dell Alienware M17 R3 Firmware 1.27.0; Dell Alienware M17 R4 Firmware 1.21.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-32856 or the next vulnerability affects your stack