Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. These vulnerabilities can be triggered by a specially crafted WinBioControlUnit API call, leading to memory corruption through out-of-bound reads and writes.