CVE-2019-16284

Summary

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFI_BOOT_SERVICES structure might be overwritten by an attacker to execute arbitrary SMM (System Management Mode) code. A list of affected products and versions are available in https://support.hp.com/rs-en/document/c06456250.

Affected Software

VendorProductVersion RangeStatus
HP Inc.Multiple - See https://support.hp.com/rs-en/document/c06456250Multiple - See https://support.hp.com/rs-en/document/c06456250affected

Weaknesses

  • Elevation of privilege

ADP Enrichment

CVE Program Container

Additional References

References