{"id":"CVE-2025-25215","aliases":["EUVD-2025-18306","GHSA-j6h7-76gh-2j3r"],"status":"published","title":"Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerability","description":"An arbitrary free vulnerability exists in the cv_close functionality of \nDell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call \ncan lead to an arbitrary free. An attacker can forge a fake session to \ntrigger this vulnerability.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.02709,"percentile":0.86059,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-763"],"published":"2025-06-13T21:26:58Z","modified":"2026-06-17T09:00:30Z","products":[{"vendor":"broadcom","product":"bcm5820x"},{"vendor":"dell","product":"controlvault3"},{"vendor":"dell","product":"controlvault3 plus"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000276106/dsa-2025-053"},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2129"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25215"},{"url":"https://github.com/advisories/GHSA-j6h7-76gh-2j3r"}],"sources":{"cve":[{"id":"CVE-2025-25215","title":"Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerability","description":"An arbitrary free vulnerability exists in the cv_close functionality of \nDell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call \ncan lead to an arbitrary free. An attacker can forge a fake session to \ntrigger this vulnerability.","status":"published","published":"2025-06-13T21:26:58.869Z","modified":"2025-11-03T19:44:58.322Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-763"],"updated_at":"2026-11-02T14:32:31.971896Z"}],"euvd":[{"id":"EUVD-2025-18306","description":"An arbitrary free vulnerability exists in the cv_close functionality of \nDell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call \ncan lead to an arbitrary free. An attacker can forge a fake session to \ntrigger this vulnerability.","status":"published","published":"2025-06-13T21:26:58Z","modified":"2025-11-03T19:44:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:33.269212Z"}],"ghsa":[{"id":"GHSA-j6h7-76gh-2j3r","title":"An arbitrary free vulnerability exists in the cv_close functionality of \nDell ControlVault3 prior...","description":"An arbitrary free vulnerability exists in the cv_close functionality of \nDell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call \ncan lead to an arbitrary free. An attacker can forge a fake session to \ntrigger this vulnerability.","status":"published","published":"2025-06-14T00:30:22Z","modified":"2025-11-03T21:35:06Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-763"],"updated_at":"2026-11-02T15:04:25.4654Z"}],"nvd":[{"id":"CVE-2025-25215","description":"An arbitrary free vulnerability exists in the cv_close functionality of \nDell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call \ncan lead to an arbitrary free. An attacker can forge a fake session to \ntrigger this vulnerability.","status":"published","published":"2025-06-13T22:15:19.337Z","modified":"2026-06-17T09:00:30.287Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-763"],"updated_at":"2026-11-02T14:11:11.789448Z"}]}}