CVE-2024-0156 is a high severity (CVSS 7.0) buffer overflow in Dell Digital Delivery versions before 5.2.0.0. A local, low privileged attacker could potentially run arbitrary code or escalate privileges. Dell fixed it in version 5.2.0.0, and the advisory lists no workaround.
What's affected
Dell advisory DSA-2024-032 lists Dell Digital Delivery versions prior to 5.2.0.0 as affected. The fix is version 5.2.0.0 or later. Dell rates the overall impact High and lists no workarounds.
CVE-2024-0155, a separate use after free in the same product, is fixed in the same release. One update covers both.
How to check if you're exposed
Check the installed version in Windows installed apps, or run this in PowerShell.
Get-Package -Name "*Digital Delivery*" | Select-Object Name, Version
Anything below 5.2.0.0 needs updating. For a fleet, use your software inventory and look for the product name, then list the machines by version.
What to do now
- Pull the Digital Delivery version for every Dell Windows device.
- Update to 5.2.0.0 or later.
- Remove the application where it is not needed.
- Record the result so you can show the fix to an auditor later.
Why it matters
The record lists CWE-122, heap based buffer overflow, and CWE-120, a classic buffer copy without checking input size. In plain terms, the program writes more data into a memory block than it was sized for, which can overwrite nearby memory. Dell describes the result as arbitrary code execution or privilege escalation.
The vector is local with high attack complexity, so an attacker needs to be on the machine already. The record does not show exploitation in the wild. Preinstalled vendor tools like this one are easy to forget in an inventory, which is why they deserve a line in your patch reports. Safeguard has a free in-browser dependency scan at gold.safeguard.sh/scan, and the Gold directory lists the CVE and CWE pages used here.
Quick check
Does it matter that two Digital Delivery CVEs came out together?
Both are fixed in 5.2.0.0, so one update closes CVE-2024-0155 and CVE-2024-0156.
Is this exploited in the wild?
The record shows KEV as false, and the Dell advisory fetched for this post does not say so.
Sources
Last reviewed: 19 October 2026.
