CVE-2024-4143: Certain HP PC products using AMI BIOS – Buffer Overflow

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-15 · updated 2026-06-17
Weakness: CWE-120

Description

A potential security vulnerability has been identified in certain HP PC products using AMI BIOS, which might allow arbitrary code execution. AMI has released firmware updates to mitigate this vulnerability.

Affected products

HP Inc. Certain HP PC Products: See HP security bulletin reference for affected versions

References

https://support.hp.com/us-en/document/ish_10914391-10914417-16/hpsbhf03953
https://support.hp.com/us-en/document/ish_10914391-10914417-16/hpsbhf03953

Get alerted when CVE-2024-4143 or the next vulnerability affects your stack