Skip to content
Fencer Vulns
medium 4.7

CVE-2024-22448 json

Dell BIOS contains an Out-of-Bounds Write vulnerability.

published 2024-04-10 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-19992

cvss
4.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 7%
public exploits
0
none known

Summary

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.

Patch / fix

  • Dell CPG BIOS 1.13.0, 1.14.0, 1.16.0, 1.28.0, 1.29.0, 1.31.0, 1.31.1, 1.31.2, 1.31.3, 1.31.4, 1.31.5, 1.31.6, 1.31.7, 1.31.8, 1.31.9, 1.31.10, 1.31.11, 1.31.12, 1.31.13, 1.31.14
  • dell alienware_16_r1 1.13.0
  • dell alienware_15_r6 1.29.0
  • dell alienware_18_r1 1.16.0
  • dell alienware_14_r2 1.13.0
  • dell g15_5511 1.28.0
  • dell g15_5530 1.14.0
  • dell g16_7620 1.14.0
  • dell g3_3500 1.29.0
  • dell g5_5500 1.29.0
  • dell g7_7500 1.31.0
  • dell g7_7700 1.31.0
  • dell inspiron_13_5330 1.14.0
  • dell inspiron_15_3530 1.10.0
  • dell inspiron_3030s 1.3.0
  • dell inspiron_5301 1.32.0
  • dell inspiron_5400 1.27.0
  • dell inspiron_5401 1.27.0
  • dell inspiron_5402 1.29.0
  • dell inspiron_5409 1.29.0
  • dell inspiron_5502 1.29.0
  • dell inspiron_5509 1.29.0
  • dell inspiron_7300 1.32.0
  • dell inspiron_7400 1.32.0
  • dell inspiron_7700_aio 1.27.0
  • dell latitude_5310 1.23.0
  • dell latitude_5310_2_in_1 1.23.0
  • dell latitude_5330 1.321.0
  • dell latitude_5340 1.12.0
  • dell latitude_5531 1.22.0

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.18% chance of exploitation in the next 30 days, higher than 7% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H
NVD 3.1 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Dell CPG BIOS
  • dell alienware_16_r1
  • dell alienware_15_r6
  • dell alienware_18_r1
  • dell alienware_14_r2
  • dell g15_5511
  • dell g15_5530
  • dell g16_7620
  • dell g3_3500
  • dell g5_5500
  • dell g7_7500
  • dell g7_7700
  • dell inspiron_13_5330
  • dell inspiron_15_3530
  • dell inspiron_3030s
  • dell inspiron_5301
  • dell inspiron_5400
  • dell inspiron_5401
  • dell inspiron_5402
  • dell inspiron_5409
  • dell inspiron_5502
  • dell inspiron_5509
  • dell inspiron_7300
  • dell inspiron_7400
  • dell inspiron_7700_aio
  • dell latitude_5310
  • dell latitude_5310_2_in_1
  • dell latitude_5330
  • dell latitude_5340
  • dell latitude_5531
  • dell latitude_5540
  • dell latitude_7320
  • dell latitude_7340
  • dell latitude_7420
  • dell latitude_7520
  • dell latitude_9330
  • dell latitude_9420
  • dell latitude_9430
  • dell latitude_9440_2in1
  • dell optiplex_micro_7010
  • dell optiplex_small_form_factor_7010
  • dell optiplex_tower_7010
  • dell precision_3440
  • dell precision_3571
  • dell precision_3580
  • dell precision_3581
  • dell precision_3660
  • dell precision_5570
  • dell precision_5750
  • dell precision_5770

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.