CVE-2022-27538

Summary of CVE-2022-27538 (HP BIOS TOCTOU): A TOCTOU vulnerability identified in the BIOS of certain HP PC products could allow arbitrary code execution, denial of service, and information disclosure. The impact and affected component are stated as BIOS-level for HP PCs, with a local attack vecto...

CVE-2019-18618

CVE-2019-18618 concerns the Synaptics VFS75xx fingerprint sensors with external flash. The firmware exposes an incorrect access control vulnerability that, on all versions prior to 2019-11-15, can let a local administrator or physical attacker access sensor data by injecting an unverified partiti...

CVE-2022-31642

CVE-2022-31642 corresponds to HP PC BIOS vulnerabilities where synchronization errors in the System Management Mode (SMM) of HP laptop BIOS firmware could allow arbitrary code execution, privilege escalation, denial of service, and information disclosure. Affected software is HP PC BIOS; the root...

CVE-2022-31640

CVE-2022-31640 concerns HP PC BIOS firmware with a vulnerability in the System Management Mode (SMM) related to improper input validation. Affected product scope is HP PC BIOS, with risk described as possible arbitrary code execution, privilege escalation, denial of service, and information discl...

CVE-2022-31641

CVE-2022-31641 affects HP PC BIOS firmware, with a vulnerability in System Management Mode (SMM) that could enable arbitrary code execution, privilege escalation, denial of service, and information disclosure on affected HP notebooks. Affected product scope is HP PC BIOS; root cause described as ...