CVE-2024-32855
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally...
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
- Record
CVE-2024-32855- CVSS 3.1
- 3.8 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2024-30641
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
- Record
EUVD-2024-30641- CVSS 3.1
- 3.8 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-57q2-23pw-7c8w
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally...
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
- Record
GHSA-57q2-23pw-7c8w- CVSS 3.1
- 3.8 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
- Record
CVE-2024-32855- CVSS 3.1
- 3.8 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L - CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-787
- Updated
- 2026-11-02
Affected products
- dell cpg bios
- dell inspiron 3480 firmware
- dell inspiron 3580 firmware
- dell latitude 3120 firmware
- dell latitude 3190 2-in-1 firmware
- dell latitude 3190 firmware
- dell latitude 3300 firmware
- dell latitude 3310 2-in-1 firmware
- dell latitude 3310 firmware
- dell latitude 3390 2-in-1 firmware
- dell latitude 5288 firmware
- dell latitude 5290 2-in-1 firmware
Show 63 moreShow less
- dell latitude 5290 firmware
- dell latitude 5300 2-in-1 firmware
- dell latitude 5300 firmware
- dell latitude 5310 2-in-1 firmware
- dell latitude 5310 firmware
- dell latitude 5400 firmware
- dell latitude 5401 firmware
- dell latitude 5410 firmware
- dell latitude 5411 firmware
- dell latitude 5420 rugged firmware
- dell latitude 5424 rugged firmware
- dell latitude 5480 firmware
- dell latitude 5488 firmware
- dell latitude 5490 firmware
- dell latitude 5491 firmware
- dell latitude 5500 firmware
- dell latitude 5501 firmware
- dell latitude 5510 firmware
- dell latitude 5511 firmware
- dell latitude 5580 firmware
- dell latitude 5590 firmware
- dell latitude 5591 firmware
- dell latitude 7200 2-in-1 firmware
- dell latitude 7210 2-in-1 firmware
- dell latitude 7212 rugged extreme tablet firmware
- dell latitude 7220 rugged extreme firmware
- dell latitude 7280 firmware
- dell latitude 7290 firmware
- dell latitude 7300 firmware
- dell latitude 7310 firmware
- dell latitude 7380 firmware
- dell latitude 7390 2-in-1 firmware
- dell latitude 7390 firmware
- dell latitude 7400 2-in-1 firmware
- dell latitude 7400 firmware
- dell latitude 7410 firmware
- dell latitude 7424 rugged extreme firmware
- dell latitude 7480 firmware
- dell latitude 7490 firmware
- dell latitude 9410 firmware
- dell latitude 9510 2in1 firmware
- dell latitude rugged 7220ex firmware
- dell precision 3520 firmware
- dell precision 3530 firmware
- dell precision 3540 firmware
- dell precision 3541 firmware
- dell precision 3550 firmware
- dell precision 3551 firmware
- dell precision 5530 2-in-1 firmware
- dell precision 5530 firmware
- dell precision 5540 firmware
- dell precision 7530 firmware
- dell precision 7540 firmware
- dell precision 7550 firmware
- dell precision 7730 firmware
- dell precision 7740 firmware
- dell precision 7750 firmware
- dell vostro 3480 firmware
- dell vostro 3580 firmware
- dell vostro 3583 firmware
- dell wyse 5470 all-in-one firmware
- dell wyse 5470 firmware
- dell xps 15 7590 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-32855 is a low vulnerability (CVSS 3.8) in Dell Cpg Bios, published June 25, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.12%, the 2nd percentile. No source names a fixed version.