{"id":"CVE-2025-29988","title":"Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability","summary":"Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.","severity":"medium","cvss":6.9,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H","cvssSource":"cna","cwe":["CWE-121"],"vendor":"Dell","product":"Dell Client Platform BIOS","affected":["client_platform_bios >= N/A < 2.1.5","client_platform_bios >= N/A < 1.35.0","client_platform_bios >= N/A < 2.24.0","client_platform_bios >= N/A < 1.33.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2025-04-10T03:55:27.335555Z"},"published":"2025-04-09","updated":"2026-11-03","sourceUpdated":"2026-11-03T22:02:57.475Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-29988","references":[{"url":"https://www.dell.com/support/kbdoc/en-in/000283859/dsa-2025-088"}],"tags":["cve.org"],"epss":0.00174,"epssPercentile":0.0691,"ingestedAt":"2026-11-05T20:33:06.548Z","slug":"CVE-2025-29988","body":"## Overview\n\nDell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.\n\n## Affected\n\n- `client_platform_bios >= N/A < 2.1.5`\n- `client_platform_bios >= N/A < 1.35.0`\n- `client_platform_bios >= N/A < 2.24.0`\n- `client_platform_bios >= N/A < 1.33.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":38,"depthScoreParts":{"impact":38,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}