CVE-2022-34399
Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A...
Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.
- Record
CVE-2022-34399- CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N - Weakness
- CWE-805
- Updated
- 2026-11-02
EUVDEUVD-2022-37354
Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.
- Record
EUVD-2022-37354- CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-xcr3-2hg5-6c3w
Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A...
Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.
- Record
GHSA-xcr3-2hg5-6c3w- CVSS 3.1
- 2.3 Low
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-119
- Updated
- 2026-11-02
NVD
Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.
- Record
CVE-2022-34399- CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N - CVSS 3.1
- 2.3 Low
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-805, CWE-119
- Updated
- 2026-11-02
Affected products
- dell alienware m15 a6 firmware
- dell alienware m15 ryzen edition r5 firmware
- dell alienware m17 ryzen edition r5 firmware
- dell cpg bios
- dell g15 5515 firmware
- dell g15 5525 firmware
- dell inspiron 3505 firmware
- dell inspiron 3515 firmware
- dell inspiron 3525 firmware
- dell inspiron 3585 firmware
- dell inspiron 3595 firmware
- dell inspiron 3785 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-34399 is a medium vulnerability (CVSS 5.1) in Dell Alienware M15 A6 Firmware, published January 18, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. No source names a fixed version.