CVE-2022-31635: Time-of-check Time-of-use (TOCTOU) Race Condition

Potential time-of-check to time-of-use TOCTOU vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure...

CVE-2022-31638: Time-of-check Time-of-use (TOCTOU) Race Condition

Potential time-of-check to time-of-use TOCTOU vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure...

CVE-2022-31636: Time-of-check Time-of-use (TOCTOU) Race Condition

Potential time-of-check to time-of-use TOCTOU vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure...

CVE-2023-32674

Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow...

CVE-2023-32674

Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow...

Buffer overflow

Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow...

CVE-2023-32674

Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow...

CVE-2023-32674

Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow...

CVE-2023-32674

CVE-2023-32674 affects HP PC Hardware Diagnostics Windows (and related tools) with a potential buffer overflow that could lead to elevation of privilege. Connected HP HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware advisories indicate affected platforms...

CVE-2023-32673

Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege...

CVE-2023-32673

Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege...

CVE-2023-32673

CVE-2023-32673 affects HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware. The issue is a potential elevation of privilege in these HP components; HP advisories reference a buffer overflow as part of the risk and note mitigations via updates (minimum versi...

CVE-2022-43778

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

CVE-2022-43777

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

Information disclosure

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

Information disclosure

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

CVE-2022-43778

CVE-2022-43778 describes TOCTOU vulnerabilities in HP BIOS firmware for certain HP PC products that may permit arbitrary code execution, denial of service, and information disclosure. The root cause is a TOCTOU issue in the BIOS timing checks. Impact is high (local attacker, high confidentiality/...

CVE-2022-43777

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

CVE-2022-27541

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

CVE-2022-27539

CVE-2022-27539 describes a TOCTOU issue in HP BIOS for certain HP PC products. The vulnerability could enable arbitrary code execution, denial of service, and information disclosure due to timing window between checks and subsequent use of critical BIOS operations. HP’s HP PC BIOS February 2023 S...