Vulnerability · Published Jun 13, 2025 · Assigned by talos
CVE-2025-24922Dell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerability
High 8.8
In plain English
A high-severity stack buffer overflow in BCM5820X from Broadcom. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.5% (higher than 89% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)3.5%top 10.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A stack-based buffer overflow vulnerability exists in the securebio_identify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted malicious cv_object can lead to a arbitrary code execution. An attacker can issue an API call to trigger this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | BCM5820X | NA |
| Dell | ControlVault3 | 0 – before 5.15.10.14 |
| Dell | ControlVault3 Plus | 0 – before 6.2.26.36 |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H