Alexander Matrosov

**Name of the Vulnerable Software and Affected Versions** Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and Dell Precision 7920 Rack Workstation BIOS (affected versions not specified) **Description** The issue is a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploit this, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell PowerEdge Server BIOS versions (affected versions not specified) **Description** A heap-based buffer overflow issue exists in systems with NVDIMM-N installed, potentially allowing a local malicious user with high privileges to exploit the issue. This could lead to a denial of service, arbitrary code execution, or information disclosure in the UEFI or BIOS Preboot Environment. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS (affected versions not specified) **Description** A stack-based buffer overflow vulnerability exists in systems with NVDIMM-N installed, which can be exploited by a local malicious user with high privileges. This could lead to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.