CVE-2022-34403
Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker...
Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.
- Record
CVE-2022-34403- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2022-37358
Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.
- Record
EUVD-2022-37358- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-f4vh-w8qv-cvrw
Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker...
Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.
- Record
GHSA-f4vh-w8qv-cvrw- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.
- Record
CVE-2022-34403- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-121, CWE-787
- Updated
- 2026-11-02
Affected products
- dell alienware m15 r6 firmware
- dell alienware m15 r7 firmware
- dell alienware m15 ryzen edition r5 firmware
- dell alienware m17 r5 amd firmware
- dell cpg bios
- dell g15 5510 firmware
- dell g15 5511 firmware
- dell g15 5515 firmware
- dell g15 5525 firmware
- dell g5 se 5505 firmware
- dell inspiron 14 5410 2-in-1 firmware
- dell inspiron 15 3511 firmware
Show 72 moreShow less
- dell inspiron 3195 2-in-1 firmware
- dell inspiron 3275 firmware
- dell inspiron 3475 firmware
- dell inspiron 3505 firmware
- dell inspiron 3515 firmware
- dell inspiron 3525 firmware
- dell inspiron 3585 firmware
- dell inspiron 3595 firmware
- dell inspiron 3785 firmware
- dell inspiron 3891 firmware
- dell inspiron 5310 firmware
- dell inspiron 5405 firmware
- dell inspiron 5410 firmware
- dell inspiron 5415 firmware
- dell inspiron 5425 firmware
- dell inspiron 5485 2-in-1 firmware
- dell inspiron 5485 firmware
- dell inspiron 5505 firmware
- dell inspiron 5510 firmware
- dell inspiron 5515 firmware
- dell inspiron 5585 firmware
- dell inspiron 7405 2-in-1 firmware
- dell inspiron 7415 firmware
- dell inspiron 7425 firmware
- dell inspiron 7510 firmware
- dell inspiron 7610 firmware
- dell latitude 3320 firmware
- dell latitude 3420 firmware
- dell latitude 3520 firmware
- dell latitude 5320 firmware
- dell latitude 5420 firmware
- dell latitude 5421 firmware
- dell latitude 5520 firmware
- dell latitude 5521 firmware
- dell latitude 7320 detachable firmware
- dell latitude 7320 firmware
- dell latitude 7420 firmware
- dell latitude 7520 firmware
- dell latitude 9420 firmware
- dell latitude 9520 firmware
- dell latitude rugged 5430 firmware
- dell latitude rugged 7330 firmware
- dell optiplex 5090 firmware
- dell optiplex 5490 all-in-one firmware
- dell optiplex 7090 aio firmware
- dell optiplex 7090 tower firmware
- dell optiplex 7090 ultra firmware
- dell precision 3450 firmware
- dell precision 3560 firmware
- dell precision 3561 firmware
- dell precision 3650 tower firmware
- dell precision 5560 firmware
- dell precision 5760 firmware
- dell precision 7560 firmware
- dell precision 7760 firmware
- dell vostro 3405 firmware
- dell vostro 3425 firmware
- dell vostro 3510 firmware
- dell vostro 3515 firmware
- dell vostro 3525 firmware
- dell vostro 3690 firmware
- dell vostro 3890 firmware
- dell vostro 5310 firmware
- dell vostro 5410 firmware
- dell vostro 5415 firmware
- dell vostro 5510 firmware
- dell vostro 5515 firmware
- dell vostro 5625 firmware
- dell vostro 5890 firmware
- dell vostro 7510 firmware
- dell xps 15 9510 firmware
- dell xps 17 9710 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-34403 is a high vulnerability (CVSS 7.5) in Dell Alienware M15 R6 Firmware, published February 1, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 5th percentile. No source names a fixed version.