CVE-2025-36581
EUVD-2025-2483914.08.2025, 14:15
Dell PowerEdge Platform version(s) 14G AMD BIOS v1.25.0 and prior, contain(s) an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dell | poweredge_r6415_firmware | 𝑥 < 1.26.0 |
| dell | poweredge_r7415_firmware | 𝑥 < 1.26.0 |
| dell | poweredge_r7425_firmware | 𝑥 ≤ 1.26.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-788 - Access of Memory Location After End of BufferThe software reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.