CVE-2025-24919

A deserialization of untrusted input vulnerability exists in the cvhDecapsulateCmd functionality of Dell ControlVault3 prior to 5.15.10.14 and ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault response to a command can lead to arbitrary code execution. An attacker can...

CVE-2025-24919

Dell ControlVault3 CVE-2025-24919 is a deserialization of untrusted input flaw in cvhDecapsulateCmd (bcmbipdll.dll). A crafted firmware response can cause incorrect parameter handling and memory corruption, enabling arbitrary code execution on the firmware. Affected products: ControlVault3 prior ...