CVE-2022-31635

CVE-2022-31635 concerns TOCTOU vulnerabilities in the BIOS of certain HP PC products, potentially enabling arbitrary code execution, privilege escalation, denial of service, and information disclosure. The affected component is the HP PC BIOS, with impact described in public entries as high (loca...

CVE-2022-31636

CVE-2022-31636 pertains to TOCTOU vulnerabilities in the BIOS of certain HP PC products. The connected Red Hat advisory and Red Hat/HP synchronization describe a BIOS-level issue that could enable arbitrary code execution, privilege escalation, denial of service, and information disclosure. Impac...

CVE-2022-31638

CVE-2022-31638 corresponds to a TOCTOU vulnerability in the BIOS of certain HP PC products. The underlying issue could allow arbitrary code execution, privilege escalation, denial of service, and information disclosure when exploiting BIOS-time checks versus usage. The connected HP HPBIOS/HP BIOS...

CVE-2022-31639

CVE-2022-31639 describes TOCTOU vulnerabilities in the BIOS of certain HP PC products that could permit arbitrary code execution, privilege escalation, denial of service, and information disclosure. The issue stems from BIOS TOCTOU conditions and affects HP PC BIOS in unspecified platforms. Publi...

CVE-2022-27540

CVE-2022-27540 concerns a TOCTOU vulnerability in HP BIOS for certain HP PC products. The issue could allow arbitrary code execution, denial of service, and information disclosure. Mitigation is via HP BIOS updates; HP’s HP PC BIOS Additional Security Update documents affected platforms and minim...

CVE-2022-27541

CVE-2022-27541 concerns TOCTOU vulnerabilities in HP BIOS for certain HP PC products. The issue allows arbitrary code execution, denial of service, and information disclosure due to TOCTOU conditions in BIOS-level checks. Affected platforms are HP PC BIOS firmware; HP has issued mitigations via B...

CVE-2022-27539

CVE-2022-27539 describes a TOCTOU issue in HP BIOS for certain HP PC products. The vulnerability could enable arbitrary code execution, denial of service, and information disclosure due to timing window between checks and subsequent use of critical BIOS operations. HP’s HP PC BIOS February 2023 S...

CVE-2022-43777

CVE-2022-43777 describes a TOCTOU vulnerability in HP BIOS affecting HP PC products. The issue could allow arbitrary code execution, denial of service, and information disclosure via a TOCTOU flaw in the BIOS. Connected sources indicate HP released BIOS updates to mitigate the vulnerability, with...

CVE-2022-43778

CVE-2022-43778 describes TOCTOU vulnerabilities in HP BIOS firmware for certain HP PC products that may permit arbitrary code execution, denial of service, and information disclosure. The root cause is a TOCTOU issue in the BIOS timing checks. Impact is high (local attacker, high confidentiality/...

CVE-2022-31637

CVE-2022-31637 is a TOCTOU vulnerability identified in the BIOS of certain HP PC products. The Red Hat and NVD entries align with HP’s security advisory describing a BIOS-level issue that could allow arbitrary code execution, privilege escalation, denial of service, and information disclosure. HP...