{"id":"CVE-2025-24922","aliases":["EUVD-2025-18303","GHSA-6hjr-3x4p-h5w8"],"status":"published","title":"Dell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerability","description":"A stack-based buffer overflow vulnerability exists in the \nsecurebio_identify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A \nspecially crafted malicious cv_object can lead to a arbitrary code \nexecution. An attacker can issue an API call to trigger this \nvulnerability.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.03256,"percentile":0.88445,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121"],"published":"2025-06-13T20:51:33Z","modified":"2026-06-17T08:59:50Z","products":[{"vendor":"broadcom","product":"bcm5820x"},{"vendor":"dell","product":"controlvault3"},{"vendor":"dell","product":"controlvault3 plus"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000276106/dsa-2025-053"},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2130"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24922"},{"url":"https://github.com/advisories/GHSA-6hjr-3x4p-h5w8"}],"sources":{"cve":[{"id":"CVE-2025-24922","title":"Dell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerability","description":"A stack-based buffer overflow vulnerability exists in the \nsecurebio_identify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A \nspecially crafted malicious cv_object can lead to a arbitrary code \nexecution. An attacker can issue an API call to trigger this \nvulnerability.","status":"published","published":"2025-06-13T20:51:33.392Z","modified":"2026-02-26T17:50:37.298Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:32:43.770144Z"}],"euvd":[{"id":"EUVD-2025-18303","description":"A stack-based buffer overflow vulnerability exists in the \nsecurebio_identify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A \nspecially crafted malicious cv_object can lead to a arbitrary code \nexecution. An attacker can issue an API call to trigger this \nvulnerability.","status":"published","published":"2025-06-13T20:51:33Z","modified":"2026-02-26T17:50:37Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:19.036418Z"}],"ghsa":[{"id":"GHSA-6hjr-3x4p-h5w8","title":"A stack-based buffer overflow vulnerability exists in the \nsecurebio_identify functionality of...","description":"A stack-based buffer overflow vulnerability exists in the \nsecurebio_identify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A \nspecially crafted malicious cv_object can lead to a arbitrary code \nexecution. An attacker can issue an API call to trigger this \nvulnerability.","status":"published","published":"2025-06-13T21:31:10Z","modified":"2025-11-03T21:34:00Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:04:23.26783Z"}],"nvd":[{"id":"CVE-2025-24922","description":"A stack-based buffer overflow vulnerability exists in the \nsecurebio_identify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A \nspecially crafted malicious cv_object can lead to a arbitrary code \nexecution. An attacker can issue an API call to trigger this \nvulnerability.","status":"published","published":"2025-06-13T21:15:20.39Z","modified":"2026-06-17T08:59:50.997Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:11:11.789448Z"}]}}