Skip to content
OpenAdvisories
High · 7.5 CVE-2022-32486 EUVD-2022-35558GHSA-5xqr-9392-q49j

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabil…

Published Oct 11, 2022 · Updated May 16, 2025 · Assigned by dell

Vendor: Dell Product: CPG BIOS

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected products

VendorProductAffectedFixed
Dell CPG BIOS unspecified – < 2.25.0 2.25.0

References