CVE-2025-29988: Dell 14 Plus 2-In-1 DB04250 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.

Affected products

Dell 14 Plus 2-In-1 DB04250 Firmware: before 1.3.2 (fixed in 1.3.2)
Dell 14 Plus DB14250 Firmware: before 1.3.2 (fixed in 1.3.2)
Dell 16 Plus 2-In-1 DB06250 Firmware: before 1.3.2 (fixed in 1.3.2)
Dell 16 Plus DB16250 Firmware: before 1.3.2 (fixed in 1.3.2)
Dell 24 All-In-One EC24250 Firmware: before 1.4.0 (fixed in 1.4.0)
Dell 27 All-In-One EC27250 Firmware: before 1.4.0 (fixed in 1.4.0)
Dell Alienware Area-51 AAT2250 Firmware: before 1.4.2 (fixed in 1.4.2)
Dell Alienware Aurora ACT1250 Firmware: before 1.4.3 (fixed in 1.4.3)
Dell Alienware m15 r6 Firmware: before 1.36.0 (fixed in 1.36.0)
Dell Alienware m15 r7 Firmware: before 1.32.0 (fixed in 1.32.0)
Dell Alienware m16 r1 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell Alienware m16 r2 Firmware: before 1.11.0 (fixed in 1.11.0)
Dell Alienware m18 r1 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell Alienware m18 r2 Firmware: before 1.13.0 (fixed in 1.13.0)
Dell Alienware x14 r2 Firmware: before 1.22.0 (fixed in 1.22.0)
Dell Alienware x16 r1 Firmware: before 1.22.0 (fixed in 1.22.0)
Dell Alienware x16 r2 Firmware: before 1.11.0 (fixed in 1.11.0)
Dell Chengming 3900 Firmware: before 1.31.0 (fixed in 1.31.0)
Dell Chengming 3910 Firmware: before 1.24.0 (fixed in 1.24.0)
Dell Chengming 3911 Firmware: before 1.24.0 (fixed in 1.24.0)
Dell g15 5510 Firmware: before 1.31.0 (fixed in 1.31.0)
Dell g15 5511 Firmware: before 1.35.0 (fixed in 1.35.0)
Dell g15 5520 Firmware: before 1.32.0 (fixed in 1.32.0)
Dell g15 5530 Firmware: before 1.26.1 (fixed in 1.26.1)
Dell g16 7620 Firmware: before 1.32.0 (fixed in 1.32.0)
and 236 more

Published 2025-04-09. Last modified 2026-06-17.