A vulnerability classified as critical was found in Dell ControlVault3 and ControlVault3 Plus NA. This vulnerability affects the function cv_send_blockdata of the component API. The manipulation leads to out-of-bounds read.

This vulnerability was named CVE-2025-24311. An attack has to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.