CVE-2022-31642

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

Vendor	Product	Versions
HP Inc.	HP PC BIOS	See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_6662920-6662944-16/hpsbhf03805Vendor Advisory
https://support.hp.com/us-en/document/ish_6662920-6662944-16/hpsbhf03805Vendor Advisory

Timeline

Published: Jun 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-316435.5A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP i CVE-2022-316447.8Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, esc CVE-2022-316457.8Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, esc CVE-2022-316467.8Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, esc CVE-2022-316477.1Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in t CVE-2022-316486.1Talend Administration Center is vulnerable to a reflected Cross-Site Scripting (XSS) issue in the SSO login endpoint. The issue is fixed for CVE-2022-316497.5ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer.CVE-2022-31656.5An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious clie CVE-2022-316505.5In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.CVE-2022-316515.5In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.CVE-2022-316545.4VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitizatio CVE-2022-316555.4VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitizatio