CVE-2024-22448

EUVD-2024-19992 · Published Apr 10, 2024

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.

Technologies

Dell Precision 5770Dell Vostro 16 5640 FirmwareDell Optiplex 7090 Tower FirmwareDell Latitude 3340Dell Latitude 3120Dell Xps 13 9305Dell Precision 3650 TowerDell Vostro 5890 FirmwareDell Latitude 9420Dell Optiplex 5000 MicroDell G5 5500 FirmwareDell Latitude 3330Dell Inspiron 3501 FirmwareDell Precision 3260 Xe CompactDell Alienware M16 R1 FirmwareDell Optiplex 5090 Tower FirmwareDell Inspiron 14 7440 2-In-1 FirmwareDell Vostro 15 3530 FirmwareDell Alienware M18 R1 FirmwareDell Inspiron 14 5410Dell Latitude 5511Dell Precision 3470 FirmwareDell Inspiron 7501 FirmwareDell Optiplex 5000 Small Form FactorDell Optiplex 5090 TowerDell Xps 13 9310 FirmwareDell Precision 3660Dell Latitude 5310 2-In-1Dell Precision 7875 TowerDell Inspiron 14 7420 2-In-1 FirmwareDell Latitude 7520Dell Latitude 7530 FirmwareDell Inspiron 5401Dell Latitude 7230 Rugged Extreme FirmwareDell Precision 3480 FirmwareDell Latitude 5330Dell Latitude 3410 FirmwareDell Inspiron 16 Plus 7620Dell Precision 7680 FirmwareDell Latitude 9520Dell Vostro 5320Dell Chengming 3991 FirmwareDell G15 5510Dell Precision 3260 Xe Compact FirmwareDell Inspiron 7306 2-In-1 FirmwareDell Optiplex 7000 Tower FirmwareDell Vostro 14 3420Dell Xps 13 9340 FirmwareDell Optiplex 3090 FirmwareDell Precision 3240 CompactDell Latitude 3120 FirmwareDell Vostro 3030SDell Optiplex 7090 UltraDell Vostro 3690 FirmwareDell Vostro 7620 FirmwareDell Inspiron 15 3511Dell Optiplex 3000 TowerDell Precision 3640Dell Inspiron 7300 FirmwareDell Optiplex 7000 Xe MicroDell Precision 7750 FirmwareDell Inspiron 14 7430 2-In-1Dell Chengming 3910 FirmwareDell Alienware M15 R6Dell Inspiron 7501Dell Precision 7750Dell Latitude 3320Dell Alienware X14 R2 FirmwareDell Inspiron 5301Dell Latitude 3440 FirmwareDell Xps 17 9730 FirmwareDell Precision 3440 FirmwareDell Chengming 3900Dell Latitude 7640 FirmwareDell Latitude 7440Dell Optiplex Small Form Factor Plus 7010Dell Latitude 5440Dell Vostro 5301Dell G16 7620Dell Latitude 3450Dell Latitude 7420Dell Latitude 5411Dell Precision 7760 FirmwareDell Precision 3571Dell Precision 3450Dell Latitude 3140 FirmwareDell Xps 13 9315Dell Optiplex 3000 Thin Client FirmwareDell Vostro 14 3440 FirmwareDell Vostro 15 7510 FirmwareDell Inspiron 13 5320 FirmwareDell Inspiron 16 Plus 7640 FirmwareDell Latitude 5430Dell Xps 17 9710 FirmwareDell Latitude 5540Dell Optiplex 5000 Micro FirmwareDell Precision 7560 FirmwareDell Vostro 3500 FirmwareDell Optiplex 3080 FirmwareDell Latitude 5310 FirmwareDell Latitude 3440Dell Precision 3550Dell Inspiron 5509 FirmwareDell Inspiron 5400Dell Alienware X16 R2Dell Inspiron 5406 2-In-1 FirmwareDell Inspiron 24 5420 All-In-One FirmwareDell Vostro 3881Dell Inspiron 15 3511 FirmwareDell Inspiron 16 7640 2-In-1Dell Latitude 9410Dell Precision 3260 Compact FirmwareDell Inspiron 14 Plus 7420Dell Latitude 5340Dell Chengming 3910Dell Inspiron 3030S FirmwareDell Xps 15 9510 FirmwareDell Optiplex 7080 FirmwareDell Alienware X14 R2Dell Optiplex 5090 Small Form Factor FirmwareDell Inspiron 13 5330Dell Latitude 3450 FirmwareDell Latitude 7330 Rugged LaptopDell Inspiron 3910Dell Latitude 7210 2-In-1 FirmwareDell Precision 5480 FirmwareDell Optiplex 5490 All-In-OneDell G7 7700Dell Latitude 9510 2In1 FirmwareDell Latitude 7430Dell Precision 7960 Tower FirmwareDell Precision 3440Dell Latitude 9510 2In1Dell Latitude 3530Dell Optiplex 7480 All-In-One FirmwareDell Latitude 5510Dell Optiplex 3080Dell Precision 3571 FirmwareDell Xps 13 Plus 9320 FirmwareDell Latitude 7320Dell Latitude 7330Dell Vostro 5880Dell Precision 3460 Xe Small Form Factor FirmwareDell Optiplex Xe4 Tower FirmwareDell Xps 13 9315 FirmwareDell Latitude 3330 FirmwareDell G15 5511Dell Latitude 5430 FirmwareDell Optiplex Small Form Factor 7010 FirmwareDell Inspiron 15 3530Dell Vostro 5880 FirmwareDell Xps 17 9700 FirmwareDell Latitude 5320Dell Inspiron 3020 Small Desktop FirmwareDell Chengming 3990Dell Inspiron 3020 DesktopDell Xps 13 Plus 9320Dell Precision 3560 FirmwareDell Vostro 15 3510 FirmwareDell Latitude 5530 FirmwareDell Latitude 5531Dell Latitude 5330 FirmwareDell Inspiron 14 7420 2-In-1Dell Inspiron 13 5320Dell Xps 17 9720 FirmwareDell Inspiron 24 5420 All-In-OneDell Precision 3580 FirmwareDell Inspiron 5401 AioDell Vostro 5320 FirmwareDell Vostro 5402Dell Xps 13 9310 2-In-1 FirmwareDell Inspiron 5406 2-In-1Dell Inspiron 3910 FirmwareDell Inspiron 14 5420 FirmwareDell Inspiron 16 Plus 7620 FirmwareDell Latitude 5431Dell Latitude 5530Dell Precision 7770 FirmwareDell Vostro 5620 FirmwareDell Vostro 15 7510Dell Precision 5860 TowerDell Inspiron 14 7440 2-In-1Dell Optiplex Micro 7010 FirmwareDell Vostro 5620Dell Xps 17 9700Dell Latitude 5440 FirmwareDell Vostro 13 5310Dell Precision 5570 FirmwareDell Vostro 5502Dell Optiplex 5400 All-In-OneDell Precision 7770Dell Vostro 15 3510Dell Precision 7670Dell Latitude 5510 FirmwareDell Latitude 7210 2-In-1Dell Xps 15 9500 FirmwareDell Precision 3650 Tower FirmwareDell Inspiron 16 7640 2-In-1 FirmwareDell Xps 13 9305 FirmwareDell Latitude 3340 FirmwareDell Inspiron 14 Plus 7440Dell Xps 15 9510Dell Latitude 5430 Rugged Laptop FirmwareDell Latitude 9330Dell Inspiron 15 7510 FirmwareDell Xps 15 9530 FirmwareDell Inspiron 7700 All-In-OneDell Latitude 5420 FirmwareDell Inspiron 16 5630 FirmwareDell Latitude 5431 FirmwareDell Inspiron 14 7430 2-In-1 FirmwareDell Optiplex 7000 Small Form Factor FirmwareDell Inspiron 3881Dell Vostro 16 5640Dell Optiplex 3280 All-In-One FirmwareDell Alienware X16 R2 FirmwareDell Latitude 7340Dell Precision 3560Dell Optiplex 7090 TowerDell Inspiron 13 5310 FirmwareDell Inspiron 7500Dell Optiplex 5400 All-In-One FirmwareDell Latitude 5421 FirmwareDell Vostro 3910 FirmwareDell Optiplex 7780 All-In-OneDell Optiplex All-In-One 7410 FirmwareDell Latitude 7030 Rugged Extreme FirmwareDell Optiplex 3000 MicroDell Latitude 9330 FirmwareDell Latitude 7320 DetachableDell Vostro 14 5410Dell Vostro 15 5510Dell Precision 5750 FirmwareDell Latitude 5520Dell Xps 9315 2-In-1Dell Inspiron 14 5418Dell Optiplex 3000 Small Form Factor FirmwareDell Optiplex 5480 All-In-One FirmwareDell Optiplex 7490 All-In-OneDell Optiplex 5090 Small Form FactorDell Precision 3551 FirmwareDell Precision 3450 FirmwareDell Chengming 3990 FirmwareDell Inspiron 14 5430 FirmwareDell Xps 17 9730Dell Latitude 3550 FirmwareDell Inspiron 15 5518Dell Inspiron 5502Dell Precision 3580Dell Inspiron 7506 2-In-1Dell Optiplex 7000 Small Form FactorDell Inspiron 16 7630 2-In-1 FirmwareDell Inspiron 15 3520 FirmwareDell Precision 5680 FirmwareDell Latitude 9520 FirmwareDell Inspiron 5402Dell Optiplex 3000 Thin ClientDell Vostro 7500 FirmwareDell G15 5511 FirmwareDell Latitude 3430Dell Vostro 3890Dell Inspiron 14 5410 FirmwareDell G16 7630 FirmwareDell Optiplex 5480 All-In-OneDell Inspiron 15 5510 FirmwareDell Latitude 9410 FirmwareDell Inspiron 7300Dell Inspiron 5301 FirmwareDell Optiplex 3000 Small Form FactorDell Vostro 3710 FirmwareDell G3 3500Dell Optiplex 5000 Tower FirmwareDell Precision 5470Dell Precision 5560 FirmwareDell Precision 3460 Xe Small Form FactorDell Vostro 3910Dell Optiplex 5080 FirmwareDell G7 7500Dell Latitude 7410 FirmwareDell Xps 15 9520Dell Inspiron 14 5418 FirmwareDell Xps 15 9500Dell Precision 3260 CompactDell Precision 7960 TowerDell Latitude 3410Dell Optiplex Small Form Factor 7010Dell Latitude 9420 FirmwareDell Latitude 5421Dell Chengming 3900 FirmwareDell Inspiron 3880Dell Inspiron 14 5440 FirmwareDell Precision 5570Dell Vostro 3681 FirmwareDell Precision 7550Dell Inspiron 24 5410 All-In-One FirmwareDell Xps 17 9720Dell Latitude 7310 FirmwareDell Latitude 5521 FirmwareDell Inspiron 16 5620 FirmwareDell Optiplex All-In-One 7410Dell Latitude 7640Dell Vostro 14 3440Dell Inspiron 7700 All-In-One FirmwareDell Optiplex 5090 Micro FirmwareDell Optiplex 5000 Small Form Factor FirmwareDell Precision 7865 Tower FirmwareDell Optiplex 7400 All-In-OneDell Inspiron 16 5630Dell Precision 7875 Tower FirmwareDell Alienware M18 R2Dell Vostro 16 5630 FirmwareDell Inspiron 27 7710 All-In-One FirmwareDell Inspiron 3881 FirmwareDell Inspiron 5509Dell Optiplex 3090 Ultra FirmwareDell Inspiron 3020 Desktop FirmwareDell Precision 3570 FirmwareDell Optiplex 5490 All-In-One FirmwareDell Optiplex Tower 7010 FirmwareDell Latitude 5521Dell Inspiron 7400Dell Vostro 3020 Tower DesktopDell Inspiron 16 5640Dell Inspiron 5401 Aio FirmwareDell Inspiron 16 7620 2-In-1 FirmwareDell Inspiron 14 5420Dell Latitude 7440 FirmwareDell Latitude 9430 FirmwareDell Vostro 7620Dell Vostro 14 3420 FirmwareDell Precision 5770 FirmwareDell Latitude 7430 FirmwareDell Precision 3551Dell Latitude 3540Dell Inspiron 14 Plus 7430Dell Latitude 5540 FirmwareDell Precision 5860 Tower FirmwareDell Inspiron 14 Plus 7430 FirmwareDell Inspiron 5410Dell Optiplex 7090 Ultra FirmwareDell Vostro 15 3520Dell Precision 5550 FirmwareDell G15 5510 FirmwareDell Optiplex 7780 All-In-One FirmwareDell Xps 15 9520 FirmwareDell Latitude 3530 FirmwareDell Optiplex 7400 All-In-One FirmwareDell Vostro 14 3430 FirmwareDell Latitude 3420 FirmwareDell Inspiron 13 5310Dell Precision 5560Dell Xps 13 9310 2-In-1Dell Optiplex 3280 All-In-OneDell Xps 13 9340Dell Latitude 7230 Rugged ExtremeDell Latitude 5310 2-In-1 FirmwareDell Precision 3561 FirmwareDell G15 5530 FirmwareDell Alienware M18 R1Dell Latitude 7340 FirmwareDell Inspiron 3030SDell Inspiron 3501Dell Precision 7560Dell Latitude 7410Dell Inspiron 5410 FirmwareDell Vostro 13 5310 FirmwareDell Latitude 5531 FirmwareDell Alienware X16 R1 FirmwareDell Precision 5760Dell Vostro 15 3530Dell Optiplex 7080Dell Inspiron 7500 FirmwareDell Latitude 7520 FirmwareDell Alienware M15 R7Dell Precision 7680Dell G15 5520Dell Inspiron 15 5510Dell Inspiron 5409 FirmwareDell Precision 3460 Small Form Factor FirmwareDell Inspiron 15 3530 FirmwareDell Latitude 5511 FirmwareDell Vostro 3890 FirmwareDell Optiplex 3090Dell Latitude 3550Dell Optiplex 5090 MicroDell Alienware X16 R1Dell Vostro 3888Dell Optiplex 7000 Micro FirmwareDell Xps 13 9310Dell G16 7630Dell Optiplex 7480 All-In-OneDell Optiplex Small Form Factor Plus 7010 FirmwareDell Vostro 3710Dell Optiplex 7000 MicroDell Precision 7780 FirmwareDell Inspiron 7706 2-In-1Dell Latitude 5410Dell Latitude 5520 FirmwareDell Precision 7760Dell Precision 3240 Compact FirmwareDell Precision 7550 FirmwareDell Optiplex Tower 7010Dell Precision 3460 Small Form FactorDell Latitude 3520Dell Inspiron 16 Plus 7640Dell Xps 14 9440 FirmwareDell Inspiron 27 7720 All-In-OneDell Latitude 7330 FirmwareDell Inspiron 5502 FirmwareDell Vostro 15 3520 FirmwareDell Vostro 5402 FirmwareDell Latitude 3510 FirmwareDell Inspiron 7706 2-In-1 FirmwareDell Vostro 7500Dell Vostro 14 3430Dell Latitude 7420 FirmwareDell Optiplex 7000 TowerDell Xps 14 9440Dell Precision 3550 FirmwareDell Latitude 3420Dell Latitude 7330 Rugged Laptop FirmwareDell Inspiron 16 7610 FirmwareDell Inspiron 7400 FirmwareDell Latitude 5320 FirmwareDell Vostro 3690Dell Inspiron 13 5330 FirmwareDell Chengming 3911Dell Precision 5480Dell Alienware M15 R6 FirmwareDell Alienware M15 R7 FirmwareDell Optiplex 3000 Tower FirmwareDell Optiplex Xe4 TowerDell Vostro 3020 Tower Desktop FirmwareDell Inspiron 3891 FirmwareDell Precision 3570Dell Latitude 5340 FirmwareDell Optiplex Micro Plus 7010 FirmwareDell Precision 5470 FirmwareDell Precision 3640 FirmwareDell G15 5520 FirmwareDell Inspiron 14 5440Dell Precision 5750Dell Vostro 3681Dell Vostro 5502 FirmwareDell Latitude 5410 FirmwareDell Latitude 5310Dell Chengming 3991Dell Optiplex 5080Dell Optiplex Micro Plus 7010Dell Alienware M18 R2 FirmwareDell Vostro 3881 FirmwareDell Optiplex 3090 UltraDell Inspiron 3020 Small DesktopDell Latitude 9440 2-In-1Dell Inspiron 16 5620Dell Inspiron 3891Dell Precision 3581 FirmwareDell Precision 5760 FirmwareDell Latitude 9440 2-In-1 FirmwareDell Latitude 3520 FirmwareDell Chengming 3911 FirmwareDell Optiplex 7490 All-In-One FirmwareDell G7 7500 FirmwareDell Inspiron 5402 FirmwareDell Optiplex 3000 Micro FirmwareDell G15 5530Dell G5 5500Dell Vostro 3888 FirmwareDell G3 3500 FirmwareDell Latitude 3540 FirmwareDell Latitude 5411 FirmwareDell Vostro 16 5630Dell Vostro 3400 FirmwareDell Precision 5550Dell Inspiron 27 7710 All-In-OneDell Latitude 3430 FirmwareDell Latitude 5430 Rugged LaptopDell Precision 3480Dell Precision 7670 FirmwareDell Inspiron 5400 FirmwareDell Vostro 14 5410 FirmwareDell Xps 9315 2-In-1 FirmwareDell Latitude 7530Dell Latitude 3140Dell Inspiron 14 Plus 7440 FirmwareDell Inspiron 16 Plus 7630 FirmwareDell Latitude 7310Dell Latitude 7030 Rugged ExtremeDell Latitude 3320 FirmwareDell Precision 5680Dell Inspiron 24 5410 All-In-OneDell G16 7620 FirmwareDell Vostro 3400Dell G7 7700 FirmwareDell Inspiron 24 5411 All-In-OneDell Inspiron 15 3520Dell Latitude 9430Dell Precision 7780Dell Inspiron 15 7510Dell Inspiron 27 7720 All-In-One FirmwareDell Vostro 15 5510 FirmwareDell Latitude 7320 Detachable FirmwareDell Inspiron 16 5640 FirmwareDell Optiplex 5000 TowerDell Vostro 5301 FirmwareDell Vostro 5890Dell Xps 15 9530Dell Inspiron 14 Plus 7420 FirmwareDell Precision 3660 FirmwareDell Inspiron 16 7620 2-In-1Dell Optiplex Micro 7010Dell Inspiron 24 5411 All-In-One FirmwareDell Latitude 5420Dell Precision 3581Dell Optiplex Tower Plus 7010Dell Vostro 3500Dell Inspiron 14 5430Dell Optiplex 7000 Xe Micro FirmwareDell Precision 3470Dell Inspiron 16 7630 2-In-1Dell Inspiron 5401 FirmwareDell Latitude 7320 FirmwareDell Alienware M16 R1Dell Inspiron 15 5518 FirmwareDell Inspiron 5409Dell Latitude 3510Dell Inspiron 16 7610Dell Inspiron 16 Plus 7630Dell Precision 3561Dell Optiplex Tower Plus 7010 FirmwareDell Inspiron 7506 2-In-1 FirmwareDell Precision 7865 TowerDell Xps 17 9710Dell Inspiron 7306 2-In-1Dell Inspiron 3880 FirmwareDell Vostro 3030S Firmware

Weaknesses

CWE-787

CVSS scores

v3.14.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://www.dell.com/support/kbdoc/en-us/000221744/dsa-2024-066

Potentially impacted assets

See if this affects your attack surface

Latest trending attack

Criticalyesterday

Google Brotli decoder - Remote Code Execution via compressed requests (Exploitation Check)

This control is the second step of the Patrowl response to CVE-2026-111497 (Node2Shell). It complements the first control of 22 October 2026, which focused on the Node.js runtime, and does not replace it. Why a second control CVE-2026-111497 is an out-of-bounds write in the Google Brotli decoder, the library that decompresses Brotli ("br") data. It was first published as a Node.js vulnerability, because Node.js bundles this decoder. Later publications showed that the flaw is in the library itself. Every product that embeds an affected version of the decoder is concerned, whatever its language or vendor. A public proof of concept demonstrates code execution. Any server that decompresses request bodies sent with "Content-Encoding: br" exposes the decoder to unauthenticated attackers. Known cases include Express 5 and NestJS 11 on Node.js, Koa and Fastify setups, Bun, Envoy and Istio with request decompression enabled, and any application or reverse proxy that decodes Brotli request bodies with an affected library. The flaw also works in the other direction. A malicious server can compromise an unpatched client that decodes a Brotli response, for example Node.js fetch(), Python clients (requests, httpx, aiohttp, Scrapy) with the Brotli or brotlicffi package, or libcurl builds with Brotli support. What this control checks Patrowl sends small, valid Brotli-compressed requests to each asset and observes whether the server decodes them. The check does not depend on the technology: it detects the behaviour, whatever the stack behind it. These requests are what any legitimate client could send. They never reach the vulnerable code path and cannot affect the availability of the service. How to read the result Potentially impacted means the asset decodes Brotli request bodies: the attack surface is exposed. It does not confirm that the asset is vulnerable. The version of the Brotli decoder in use is not visible from the outside. This check covers applications that parse request bodies on their root path. A Not impacted result does not rule out exposure on other routes, nor on the client side. Checking the versions on the servers remains the only exhaustive verification. Affected and fixed versions Google Brotli 1.0.3 to 1.2.0 are affected, fixed in 1.0.10, 1.1.1 and 1.2.1. Fixed releases of the main products embedding it: Node.js 22.23.4, 24.22.1 and 26.12.1 (end-of-life lines 20.x and older and 25.x receive no fix), Bun 1.4.4, Envoy 1.37.8, 1.38.6, 1.39.3 and 1.40.0, Istio 1.29.9, 1.30.6 and 1.31.2, Python Brotli 1.2.1 and brotlicffi 1.2.1.0. Products that link against the system library depend on the Brotli package of the Linux distribution. Recommendations Update every component that embeds the Brotli decoder (only real fix). Start with the assets flagged by this control. Restart the processes after the update. Rebuild containers, single-executable applications and appliances that bundle an affected runtime or library. Reduce the exposure until the update is deployed. Reject requests with "Content-Encoding: br" at the reverse proxy, load balancer or WAF, case-insensitively and including lists such as "gzip, br". On Envoy and Istio, disable request decompression for Brotli. Review outbound calls. List the features that fetch content from servers you do not control, and patch the services that host them first.

CVE-2024-22448

Technologies

Weaknesses

CVSS scores

MITRE ATT&CK

References

Potentially impacted assets

Latest trending attack

Google Brotli decoder - Remote Code Execution via compressed requests (Exploitation Check)

Our latest news

PHP2Shell: Two Critical RCE Flaws in PHP (CVSS 9.2)

Manage External Security Across All Your Entities

Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34

Take 15 minutes to discover our platform with our experts