Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-16284

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hp

Description

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HP Inc. Multiple - See https://support.hp.com/rs-en/document/c06456250

  • Multiple - See https://support.hp.com/rs-en/document/c06456250affected

References