ReVault! When your SoC turns against you…

Talos disclosed five vulnerabilities in Dell ControlVault3 firmware and its Windows APIs that affect over 100 Dell laptop models; these include out-of-bounds, arbitrary free, stack overflow, and unsafe deserialization flaws. Combined, the issues can enable persistent firmware implants that survive OS reinstalls, bypass Windows login and biometric authentication, and be exploited both remotely from a compromised Windows account and locally via physical access. Talos provides technical analysis, CVE IDs, mitigation steps (patching, disabling CV features), and detection recommendations for administrators.