Vulnerability · Published Nov 17, 2025 · Assigned by talos
CVE-2025-36463Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability
High 7.3
In plain English
A high-severity security flaw in BCM5820X from Broadcom. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Official description
Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 4 (`WBIO_USH_ADD_RECORD`) and with an invalid `SendBufferSize`.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | BCM5820X | NA |
| Dell | ControlVault3 | 0 – before 5.15.14.19 |
| Dell | ControlVault3 Plus | 0 – before 6.2.36.47 |
Weakness: CWE-805 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H