What’s Vulnerable › Vulnerabilities
CVE-2022-31638
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-06-13 · updated 2026-06-17
- Weakness: CWE-367
Description
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Affected products
- HP Dragonfly Folio 13.5 Inch G3 2-In-1 Notebook Pc Firmware: through 0.10.103
- HP Elite Dragonfly 13.5 Inch G3 Notebook Pc Firmware: through 01.03.01
- HP Elite Dragonfly Firmware: through 01.21.01
- HP Elite Dragonfly G2 Firmware: through 01.09.10
- HP Elite Dragonfly Max Firmware: through 01.09.10
- HP Elite Mini 600 G9 Desktop Pc Firmware: through 02.05.00
- HP Elite Mini 800 G9 Desktop Pc Firmware: through 02.05.00
- HP Elite Sff 600 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite Sff 800 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite Slice Firmware: through 2.58
- HP Elite Slice For Meeting Rooms Firmware: through 2.58
- HP Elite Slice G2 - Audio Ready With Zoom Rooms Firmware: through 2.58
- HP Elite Slice G2 - Partner Ready With Microsoft Teams Rooms Firmware: through 2.58
- HP Elite Slice G2 With Intel Unite Firmware: through 2.58
- HP Elite Slice G2 With Microsoft Teams Rooms Firmware: through 2.58
- HP Elite Slice G2 With Zoom Rooms Firmware: through 2.58
- HP Elite Tower 600 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite Tower 680 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite Tower 800 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite Tower 880 G9 Desktop Pc Firmware: through 02.05.01
- HP Elite X2 1012 G1 Firmware: through 1.57
- HP Elite X2 1012 G1 Tablet Firmware: through 1.57
- HP Elite X2 1012 G1 Tablet With Travel Keyboard Firmware: through 1.57
- HP Elite X2 1012 G2 Firmware: through 1.43
- HP Elite X2 1013 G3 Firmware: through 01.21.01
- HP Elite X2 G4 Firmware: through 01.21.01
- HP Elite X2 G8 Tablet Firmware: through 01.09.10
- HP Elite X360 1040 14 Inch G9 2-In-1 Notebook Pc Firmware: through 01.03.01
- HP Elite X360 830 13 Inch G9 2-In-1 Notebook Pc Firmware: through 01.03.01
- HP Elitebook 1030 G1 Firmware: through 1.57
References
- https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814
- https://support.hp.com/us-en/document/ish_7149996-7150021-16/hpsbhf03814
Get alerted when CVE-2022-31638 or the next vulnerability affects your stack