Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. These vulnerabilities can be triggered by a specially crafted WinBioControlUnit API call with specific parameters, leading to memory corruption by writing up to three null bytes past the end of a buffer.