Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. These vulnerabilities can be triggered by a specially crafted WinBioControlUnit API call, potentially leading to memory corruption. Exploitation requires specific conditions, including a ControlCode 4 call with a SendBufferSize between 1 and 103 bytes. The difficulty of exploitation may limit the impact primarily to denial of service.