{"id":"CVE-2024-32855","aliases":["EUVD-2024-30641","GHSA-57q2-23pw-7c8w"],"status":"published","title":"Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally...","description":"Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.","severity":{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00125,"percentile":0.02207,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2024-06-25T04:06:39Z","modified":"2026-06-17T07:30:33Z","products":[{"vendor":"dell","product":"cpg bios"},{"vendor":"dell","product":"inspiron_3480_firmware"},{"vendor":"dell","product":"inspiron_3580_firmware"},{"vendor":"dell","product":"latitude_3120_firmware"},{"vendor":"dell","product":"latitude_3190_2-in-1_firmware"},{"vendor":"dell","product":"latitude_3190_firmware"},{"vendor":"dell","product":"latitude_3300_firmware"},{"vendor":"dell","product":"latitude_3310_2-in-1_firmware"},{"vendor":"dell","product":"latitude_3310_firmware"},{"vendor":"dell","product":"latitude_3390_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5288_firmware"},{"vendor":"dell","product":"latitude_5290_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5290_firmware"},{"vendor":"dell","product":"latitude_5300_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5300_firmware"},{"vendor":"dell","product":"latitude_5310_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5310_firmware"},{"vendor":"dell","product":"latitude_5400_firmware"},{"vendor":"dell","product":"latitude_5401_firmware"},{"vendor":"dell","product":"latitude_5410_firmware"},{"vendor":"dell","product":"latitude_5411_firmware"},{"vendor":"dell","product":"latitude_5420_rugged_firmware"},{"vendor":"dell","product":"latitude_5424_rugged_firmware"},{"vendor":"dell","product":"latitude_5480_firmware"},{"vendor":"dell","product":"latitude_5488_firmware"},{"vendor":"dell","product":"latitude_5490_firmware"},{"vendor":"dell","product":"latitude_5491_firmware"},{"vendor":"dell","product":"latitude_5500_firmware"},{"vendor":"dell","product":"latitude_5501_firmware"},{"vendor":"dell","product":"latitude_5510_firmware"},{"vendor":"dell","product":"latitude_5511_firmware"},{"vendor":"dell","product":"latitude_5580_firmware"},{"vendor":"dell","product":"latitude_5590_firmware"},{"vendor":"dell","product":"latitude_5591_firmware"},{"vendor":"dell","product":"latitude_7200_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7210_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7212_rugged_extreme_tablet_firmware"},{"vendor":"dell","product":"latitude_7220_rugged_extreme_firmware"},{"vendor":"dell","product":"latitude_7280_firmware"},{"vendor":"dell","product":"latitude_7290_firmware"},{"vendor":"dell","product":"latitude_7300_firmware"},{"vendor":"dell","product":"latitude_7310_firmware"},{"vendor":"dell","product":"latitude_7380_firmware"},{"vendor":"dell","product":"latitude_7390_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7390_firmware"},{"vendor":"dell","product":"latitude_7400_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7400_firmware"},{"vendor":"dell","product":"latitude_7410_firmware"},{"vendor":"dell","product":"latitude_7424_rugged_extreme_firmware"},{"vendor":"dell","product":"latitude_7480_firmware"},{"vendor":"dell","product":"latitude_7490_firmware"},{"vendor":"dell","product":"latitude_9410_firmware"},{"vendor":"dell","product":"latitude_9510_2in1_firmware"},{"vendor":"dell","product":"latitude_rugged_7220ex_firmware"},{"vendor":"dell","product":"precision_3520_firmware"},{"vendor":"dell","product":"precision_3530_firmware"},{"vendor":"dell","product":"precision_3540_firmware"},{"vendor":"dell","product":"precision_3541_firmware"},{"vendor":"dell","product":"precision_3550_firmware"},{"vendor":"dell","product":"precision_3551_firmware"},{"vendor":"dell","product":"precision_5530_2-in-1_firmware"},{"vendor":"dell","product":"precision_5530_firmware"},{"vendor":"dell","product":"precision_5540_firmware"},{"vendor":"dell","product":"precision_7530_firmware"},{"vendor":"dell","product":"precision_7540_firmware"},{"vendor":"dell","product":"precision_7550_firmware"},{"vendor":"dell","product":"precision_7730_firmware"},{"vendor":"dell","product":"precision_7740_firmware"},{"vendor":"dell","product":"precision_7750_firmware"},{"vendor":"dell","product":"vostro_3480_firmware"},{"vendor":"dell","product":"vostro_3580_firmware"},{"vendor":"dell","product":"vostro_3583_firmware"},{"vendor":"dell","product":"wyse_5470_all-in-one_firmware"},{"vendor":"dell","product":"wyse_5470_firmware"},{"vendor":"dell","product":"xps_15_7590_firmware"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000225627/dsa-2024-123","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-32855"},{"url":"https://github.com/advisories/GHSA-57q2-23pw-7c8w"}],"sources":{"cve":[{"id":"CVE-2024-32855","description":"Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.","status":"published","published":"2024-06-25T04:06:39.172Z","modified":"2024-08-02T02:20:35.676Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:34:15.662528Z"}],"euvd":[{"id":"EUVD-2024-30641","description":"Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.","status":"published","published":"2024-06-25T04:06:39Z","modified":"2024-08-02T02:20:35Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"low"}],"updated_at":"2026-11-03T03:50:23.057649Z"}],"ghsa":[{"id":"GHSA-57q2-23pw-7c8w","title":"Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally...","description":"Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.","status":"published","published":"2024-06-25T06:30:39Z","modified":"2024-06-25T06:30:39Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"low"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:57:31.517228Z"}],"nvd":[{"id":"CVE-2024-32855","description":"Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.","status":"published","published":"2024-06-25T04:15:14.6Z","modified":"2026-06-17T07:30:33.353Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:10:09.388795Z"}]}}