The vulnerability of the cvhDecapsulateCmd() function in the Dell ControlVault3 security driver package allows a attacker to execute arbitrary code.

The vulnerability of the cvhDecapsulateCmd function in the Dell ControlVault3 security driver suite is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2025-24919: Deserialization of Untrusted Data

A deserialization of untrusted input vulnerability exists in the cvhDecapsulateCmd functionality of Dell ControlVault3 prior to 5.15.10.14 and ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault response to a command can lead to arbitrary code execution. An attacker can...