CVE-2025-29988

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-04-09 · updated 2026-06-17
Weakness: CWE-121

Description

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.

Affected products

Dell 14 Plus 2-In-1 Db04250 Firmware: before 1.3.2 — fixed in 1.3.2
Dell 14 Plus Db14250 Firmware: before 1.3.2 — fixed in 1.3.2
Dell 16 Plus 2-In-1 Db06250 Firmware: before 1.3.2 — fixed in 1.3.2
Dell 16 Plus Db16250 Firmware: before 1.3.2 — fixed in 1.3.2
Dell 24 All-In-One Ec24250 Firmware: before 1.4.0 — fixed in 1.4.0
Dell 27 All-In-One Ec27250 Firmware: before 1.4.0 — fixed in 1.4.0
Dell Alienware Area-51 Aat2250 Firmware: before 1.4.2 — fixed in 1.4.2
Dell Alienware Aurora Act1250 Firmware: before 1.4.3 — fixed in 1.4.3
Dell Alienware M15 R6 Firmware: before 1.36.0 — fixed in 1.36.0
Dell Alienware M15 R7 Firmware: before 1.32.0 — fixed in 1.32.0
Dell Alienware M16 R1 Firmware: before 1.26.0 — fixed in 1.26.0
Dell Alienware M16 R2 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Alienware M18 R1 Firmware: before 1.26.0 — fixed in 1.26.0
Dell Alienware M18 R2 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Alienware X14 R2 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Alienware X16 R1 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Alienware X16 R2 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Chengming 3900 Firmware: before 1.31.0 — fixed in 1.31.0
Dell Chengming 3910 Firmware: before 1.24.0 — fixed in 1.24.0
Dell Chengming 3911 Firmware: before 1.24.0 — fixed in 1.24.0
Dell G15 5510 Firmware: before 1.31.0 — fixed in 1.31.0
Dell G15 5511 Firmware: before 1.35.0 — fixed in 1.35.0
Dell G15 5520 Firmware: before 1.32.0 — fixed in 1.32.0
Dell G15 5530 Firmware: before 1.26.1 — fixed in 1.26.1
Dell G16 7620 Firmware: before 1.32.0 — fixed in 1.32.0
Dell G16 7630 Firmware: before 1.26.1 — fixed in 1.26.1
Dell Inspiron 13 5310 Firmware: before 2.33.0 — fixed in 2.33.0
Dell Inspiron 13 5320 Firmware: before 1.25.0 — fixed in 1.25.0
Dell Inspiron 13 5330 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Inspiron 14 5410 2-In-1 Firmware: before 2.32.0 — fixed in 2.32.0

How to fix

Upgrade to a fixed version: Dell 14 Plus 2-In-1 Db04250 Firmware 1.3.2; Dell 14 Plus Db14250 Firmware 1.3.2; Dell 16 Plus 2-In-1 Db06250 Firmware 1.3.2; Dell 16 Plus Db16250 Firmware 1.3.2; Dell 24 All-In-One Ec24250 Firmware 1.4.0; Dell 27 All-In-One Ec27250 Firmware 1.4.0; Dell Alienware Area-51 Aat2250 Firmware 1.4.2; Dell Alienware Aurora Act1250 Firmware 1.4.3; Dell Alienware M15 R6 Firmware 1.36.0; Dell Alienware M15 R7 Firmware 1.32.0; Dell Alienware M16 R1 Firmware 1.26.0; Dell Alienware M16 R2 Firmware 1.11.0. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-in/000283859/dsa-2025-088

Get alerted when CVE-2025-29988 or the next vulnerability affects your stack