CVE-2025-29988

high-risk

Published 2025-04-09

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.

Do I need to act?

0.06% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.9/10 Medium

LOCAL / LOW complexity

Affected Products (20)

Latitude 3140 2In1 Firmware

Latitude 3320 Firmware

Latitude 3330 Firmware

Latitude 3340 Firmware

Latitude 3410 Firmware

Latitude 3420 Firmware

Latitude 3430 Firmware

Latitude 3440 Firmware

Latitude 3450 Firmware

Latitude 3510 Firmware

Latitude 3520 Firmware

Latitude 3530 Firmware

Latitude 3540 Firmware

Latitude 3550 Firmware

Latitude 5320 Firmware

Latitude 5330 Firmware

Latitude 5340 Firmware

Latitude 5350 Firmware

Latitude 5420 Firmware

Latitude 5421 Firmware

Affected Vendors

Dell

References (1)

Vendor Advisory https://www.dell.com/support/kbdoc/en-in/000283859/dsa-2025-088

/ 100

high-risk

Severity 22/34 · High

Exploitability 0/34 · Minimal

Exposure 33/34 · Critical