CVE-2022-32491 | CVE Tracker

Description

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM.

Scores

CVSS scores of CVE-2022-32491, by who scored it
Scored by	CVSS	Score	Vector
dellCNA (assigner)	3.1	Medium4.1	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
NVDNVD · Modified	3.1	High7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 0.17% · top 94% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.1.

Weakness

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer (opens in a new tab)All about CWE-119 and its CVEs
CWE-120 (opens in a new tab)All about CWE-120 and its CVEs

Affected products

Dell · CPG BIOS
- affected unspecified – < OptiPlex 7770 All-In-One BIOS (version: 1.14.0)

References (1)

https://www.dell.com/support/kbdoc/000203758 (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2022-32491](https://trackcve.app/badge/CVE-2022-32491.svg)](https://trackcve.app/cve/CVE-2022-32491)

Record last updated 15 May 2025, 15:35 UTC.

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability…