CVE-2025-36553

Name of the Vulnerable Software and Affected Versions Dell ControlVault3 versions prior to 5.15.14.19 Dell ControlVault3 Plus versions prior to 6.2.36.47

Description A buffer overflow issue exists in the CvManager functionality. A specially crafted ControlVault API call can lead to memory corruption. An attacker can issue an API call to trigger this issue. The vulnerability occurs due to improper handling of crafted API calls, allowing an attacker to send a malicious API request that exceeds the expected memory boundaries during processing. This can lead to memory corruption.

Recommendations Dell ControlVault3 versions prior to 5.15.14.19 should be updated. Dell ControlVault3 Plus versions prior to 6.2.36.47 should be updated.