high
8.8
CWE
787 121 119
Advisory Published
Updated

CVE-2022-34403: Buffer Overflow

First published: Wed Feb 01 2023(Updated: )

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.

Credit: security_alert@emc.com

Affected SoftwareAffected VersionHow to fix
Dell Alienware m15 R6 Firmware<1.17.0
Dell Alienware m15 R6 Firmware
Dell Alienware m15 R7 AMD Firmware<1.4.3
Dell Alienware m15 R7 Firmware
Dell Alienware m15 Ryzen Edition R5<1.8.0
Dell Alienware m15 Ryzen Edition R5
Dell Alienware m17 R5<1.4.3
Dell Alienware m17 R5
Dell G15 5510 Firmware<1.16.0
Dell G15 5510 Firmware
Dell G15 5511 Firmware<1.18.0
Dell G15 5511 Firmware
Dell G15 5515 Firmware<1.8.0
Dell G15 5515 Firmware
Dell G15 5525<1.4.3
Dell G15 5525 Firmware
Dell G5 SE 5505<1.13.0
Dell G5 SE 5505 Firmware
Dell Inspiron 5410 Firmware<2.15.2
Dell Inspiron 5410
Dell Inspiron 3511 Firmware<1.18.2
Dell Inspiron 15 3511 Firmware
Dell Inspiron 3195 Firmware<1.6.0
Dell Inspiron 3195 2-in-1 firmware
Dell Inspiron 22-3275 Firmware<1.9.2
Dell Inspiron 22-3275
Dell Inspiron 24-3475 Firmware<1.9.2
Dell Inspiron 24-3475 Firmware
Dell Inspiron 3505 Firmware<1.9.0
Dell Inspiron 3505 Firmware
Dell Inspiron 15 3515 Firmware<1.9.0
Dell Inspiron 3515 Firmware
Dell Inspiron 15 3525 Firmware<1.5.0
Dell Inspiron 15 3525
Dell Inspiron 3585 Firmware<1.10.0
Dell Inspiron 3585 Firmware
Dell Inspiron 3595 Firmware<1.5.0
Dell Inspiron 3595 Firmware
Dell Inspiron 3785 Firmware<1.10.0
Dell Inspiron 3785 Firmware
Dell Inspiron 3891 Firmware<1.12.0
Dell Inspiron 3891
Dell Inspiron 13 5310 Firmware<2.15.0
Dell Inspiron 13 5310
Dell Inspiron 5405 Firmware<1.9.0
Dell Inspiron 5405
Dell Inspiron 14 5410 Firmware<2.14.0
Dell Inspiron 24 5410 All-in-One
Dell Inspiron 5415 Firmware<1.13.0
Dell Inspiron 5415 Firmware
Dell Inspiron 14 5425 Firmware<1.5.0
Dell Inspiron 14 5425
Dell Inspiron 5485 Firmware<2.11.0
Dell Inspiron 5485 Firmware
Dell Inspiron 5485 2-in-1 Firmware<2.11.0
Dell Inspiron 5485 2-in-1 Firmware
Dell Inspiron 5505 Firmware<1.9.0
Dell Inspiron 5505
Dell Inspiron 15 5510 Firmware<2.15.2
Dell Inspiron 15 5510
Dell Inspiron 5515 Firmware<1.13.0
Dell Inspiron 5515 Firmware
Dell Inspiron 5585 Firmware<2.11.0
Dell Inspiron 5585 Firmware
Dell Inspiron 7405 2-in-1 firmware<1.10.1
Dell Inspiron 7405
Dell Inspiron 7415 Firmware<1.13.0
Dell Inspiron 7415 Firmware
Dell Inspiron 7425 Firmware<1.5.0
Dell Inspiron 7425
Dell Inspiron 15 7510 Firmware<1.12.0
Dell Inspiron 15 7510
Dell Inspiron 16 7610 Firmware<1.12.0
Dell Inspiron 16 7610 Firmware
Dell Latitude 3320 Firmware<1.18.2
Dell Latitude 3320 Firmware
Dell Latitude 3420 Firmware<1.23.2
Dell Latitude 3420 Firmware
Dell Latitude 3520 Firmware<1.23.2
Dell Latitude 3520 Firmware
Dell Latitude 5320 Firmware<1.24.3
Dell Latitude 5320 Firmware
Dell Latitude Rugged 5420 Firmware<1.22.0
Dell Latitude 5420 Firmware
Dell Latitude 5520 Firmware<1.24.3
Dell Latitude 5520 Firmware
Dell Latitude 5521 Firmware<1.17.3
Dell Latitude 5521 Firmware
Dell Latitude 7320 Detachable Firmware<1.20.0
Dell Latitude 7320 Firmware
Dell Latitude 7320 Detachable Firmware<1.17.2
Dell Latitude 7320 Detachable Firmware
Dell Latitude 7420 Firmware<1.20.0
Dell Latitude 7420 Firmware
Dell Latitude 7520 Firmware<1.20.0
Dell Latitude 7520 Firmware
Dell Latitude 9420 Firmware<1.16.2
Dell Latitude 9420 Firmware
Dell Latitude 9520 Firmware<1.17.0
Dell Latitude 9520 Firmware
Dell Latitude 5430 Rugged Firmware<1.12.0
Dell Latitude 5430 Rugged Firmware
Dell Latitude 7330 Rugged Firmware<1.12.0
Dell Latitude 7330
Dell Latitude 5421 Firmware<1.15.0
Dell Latitude 5421 Firmware
Dell OptiPlex 5090 Tower Firmware<1.12.0
Dell OptiPlex 5090 Firmware
Dell OptiPlex 5490 AIO Firmware<1.15.0
Dell OptiPlex 5490 All-in-One Firmware
Dell OptiPlex 7090 Tower Firmware<1.12.0
Dell OptiPlex 7090 Tower Firmware
Dell OptiPlex 7090 Ultra Firmware<1.15.0
Dell OptiPlex 7090 Ultra Firmware
Dell Optiplex 7090 Aio Firmware<1.15.0
Dell OptiPlex 7090
Dell Precision 3450 Firmware<1.12.0
Dell Precision 3450 Firmware
Dell Precision 3560 Firmware<1.24.3
Dell Precision 3560 Firmware
Dell Precision 3561 Firmware<1.17.3
Dell Precision 3561 Firmware
Dell Precision 3650 MT Firmware<1.16.0
Dell Precision 3650 Tower Firmware
Dell Precision 5560 Firmware<1.15.2
Dell Precision 5560 Firmware
Dell Precision 5760 Firmware<1.15.2
Dell Precision 5760 Firmware
Dell Precision 7560 Firmware<1.16.0
Dell Precision 7560 Firmware
Dell Precision 7760 Firmware<1.16.0
Dell Precision 7780
Dell Vostro 3405 Firmware<1.9.0
Dell Vostro 3405 Firmware
Dell Vostro 14 3425 Firmware<1.5.0
Dell Vostro 3425 Firmware
Dell Vostro 15 3510 Firmware<1.18.2
Dell Vostro 3510 Firmware
Dell Vostro 15 3515 Firmware<1.9.0
Dell Vostro 3515 Firmware
Dell Vostro 15 3525 Firmware<1.5.0
Dell Vostro 15 3525 Firmware
Dell Vostro 3690 Firmware<1.12.0
Dell Vostro 3690 Firmware
Dell Vostro 3890 Firmware<1.12.0
Dell Vostro 3890 Firmware
Dell Vostro 13 5310 Firmware<2.15.0
Dell Vostro 5310 Firmware
Dell Vostro 14 5410 Firmware<2.15.2
Dell Vostro 14 5410 Firmware
Dell Vostro 5415 Firmware<1.13.0
Dell Vostro 5415 Firmware
Dell Vostro 5510 Firmware<2.15.2
Dell Vostro 5510 Firmware
Dell Vostro 5515<1.13.0
Dell Vostro 5515 Firmware
Dell Vostro 5625 Firmware<1.5.0
Dell Vostro 5625 Firmware
Dell Vostro 5890 Firmware<1.12.0
Dell Vostro 5890 Firmware
Dell Vostro 15 7510 Firmware<1.12.0
Dell Vostro 15 7510
Dell XPS 15 9510 Firmware<1.15.2
Dell XPS 15 9510 Firmware
Dell XPS 17 9710 Firmware<1.15.2
Dell XPS 17 9710 Firmware

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2022-34403?

    The severity of CVE-2022-34403 is rated as high due to the potential for arbitrary code execution.

  • How can I fix CVE-2022-34403?

    To fix CVE-2022-34403, users should update to the latest firmware version provided by Dell for their affected devices.

  • Which devices are affected by CVE-2022-34403?

    CVE-2022-34403 affects various Dell devices including Alienware and Inspiron models with specific firmware versions.

  • Who can exploit CVE-2022-34403?

    CVE-2022-34403 can be exploited by a local authenticated attacker with access to the system.

  • What type of vulnerability is CVE-2022-34403?

    CVE-2022-34403 is a stack-based buffer overflow vulnerability in Dell BIOS.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203