CVE-2022-37019
HP PC BIOS May 2024 Security Updates for Potential Stack Buffer Overflows
Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
HP PC BIOS May 2024 Security Updates for Potential Stack Buffer Overflows
Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.
- Record
CVE-2022-37019- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L - Weakness
- CWE-269
- Updated
- 2026-11-02
EUVDEUVD-2022-39676
Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.
- Record
EUVD-2022-39676- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-g7xm-f45g-5wvg
Potential vulnerabilities have been identified in the system BIOS for certain HP PC products...
Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.
- Record
GHSA-g7xm-f45g-5wvg- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L - Weakness
- CWE-269
- Updated
- 2026-11-02
NVD
Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.
- Record
CVE-2022-37019- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L - Weakness
- CWE-269
- Updated
- 2026-11-02
Affected products
- hp inc. pc products
- hp elite slice firmware
- hp elite slice for meeting rooms firmware
- hp elitebook 1040 g3 firmware
- hp elitebook 820 g3 firmware
- hp elitebook 828 g3 firmware
- hp elitebook 840 g3 firmware
- hp elitebook 848 g3 firmware
- hp elitebook 850 g3 firmware
- hp elitebook folio g1 firmware
- hp elitedesk 800 35w g2 desktop mini pc firmware
- hp elitedesk 800 65w g2 desktop mini pc firmware
Show 15 moreShow less
- hp mp9 g2 retail system firmware
- hp probook 440 g3 firmware
- hp probook 446 g3 firmware
- hp probook 470 g3 firmware
- hp probook 640 g2 firmware
- hp probook 650 g2 firmware
- hp rp9 g1 retail system firmware
- hp z238 microtower workstation firmware
- hp z240 small form factor workstation firmware
- hp z240 tower workstation firmware
- hp z2 mini g3 workstation firmware
- hp zbook 15 g3 firmware
- hp zbook 15u g3 firmware
- hp zbook 17 g3 firmware
- hp zbook studio g3 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-37019 is a medium vulnerability (CVSS 6.8) in Hp Inc. Pc Products, published June 10, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. No source names a fixed version.