CVE-2022-31644

CVE-2022-31644 affects HP PC BIOS firmware, with a root cause described as an SMM/UEFI vulnerability leading to memory corruption (out-of-bounds write) that could permit arbitrary code execution, privilege escalation, DoS, or information disclosure. HP has released mitigations via BIOS updates (m...

CVE-2022-31644

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure...

High-Severity Firmware Security Flaws Left Unpatched in HP Enterprise Devices

A number of firmware security flaws uncovered in HP's business-oriented high-end notebooks continue to be left unpatched in some devices even months after public disclosure. Binarly, which first revealed details of the issues at the Black Hat USA conference in mid-August 2022, said the...