Out-of-Bounds Vulnerabilities in Dell ControlVault3 and ControlVault3 Plus Drivers

CVE-2025-36461

What is CVE-2025-36461?

Multiple vulnerabilities related to out-of-bounds reads and writes have been identified in the ControlVault WBDI Driver of Dell ControlVault3 and ControlVault3 Plus. Exploitable via specially crafted WinBioControlUnit calls, these vulnerabilities can lead to memory corruption. Specifically, improper handling of buffer sizes during API calls allows attackers to either write beyond allocated memory or read unauthorized data, posing significant risks to system integrity and security.

References