A vulnerability, which was classified as critical, was found in Dell ControlVault3 and ControlVault3 Plus. Affected is the function
cv_upgrade_sensor_firmware
. The manipulation leads to out-of-bounds write.
This vulnerability is traded as CVE-2025-25050. Attacking locally is a requirement. There is no exploit available.
It is recommended to upgrade the affected component.