Skip to content
OpenAdvisories
High · 8.8 CVE-2025-32089 EUVD-2025-197895GHSA-j52v-6c6w-v656

Dell ControlVault3 CvManager_SBI buffer overflow vulnerability

Published Nov 17, 2025 · Updated Feb 26, 2026 · Assigned by talos

Description

A buffer overflow vulnerability exists in the CvManager_SBI functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to a arbitrary code execution. An attacker can issue an api call to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Broadcom BCM5820X NA —
Dell ControlVault3 < 5.15.14.19 5.15.14.19
Dell ControlVault3 Plus < 6.2.36.47 6.2.36.47

References