ReVault! When your SoC turns against you…

Summary: Cisco Talos published five CVEs against Dell ControlVault firmware, including out-of-bounds vulnerabilities (CVE-2025-24311, CVE-2025-25050), an arbitrary free (CVE-2025-25215), a stack overflow (CVE-2025-24922), and an unsafe deserialization flaw (CVE-2025-24919) in ControlVault's Windows APIs. ControlVault3 and ControlVault3+ ship in more than 100 actively supported Dell laptop models, mostly Latitude and Precision, and Talos showed a non-administrative Windows user can trigger arbitrary code execution on the firmware to leak key material and permanently modify it.
Why it matters: The same firmware that stores passwords, biometric templates and security codes can be rewritten by a non-admin user, or by anyone who pries open the laptop and connects to the Unified Security Hub board over USB without a login or full-disk encryption password. Talos also showed tampered firmware can be made to accept any fingerprint, so the biometric check your access policy depends on may no longer be evidence of who is at the keyboard.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-24311 CVE-2025-24919 CVE-2025-24922 CVE-2025-25050 CVE-2025-25215
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026