Skip to content
OpenAdvisories
High · 7.5 CVE-2022-34391 EUVD-2022-37346GHSA-xvm4-x6jf-7p35

Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local authenticated malicio…

Published Oct 12, 2022 · Updated May 16, 2025 · Assigned by dell

Description

Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected products

VendorProductAffectedFixed
Dell CPG BIOS unspecified – < 1.2.15 1.2.15

References