系微安全保證

H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

https://www.cve.org/CVERecord?id=CVE-2026-12855

Description:
Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects.

CWE-20: Improper Input Validation

HP feature version
– Platform 5.4: 05.47.2701.2631
– Platform 5.5: 05.55.45.2630
– Platform 5.6: 05.62.29.2630
– Platform 5.7: 05.72.21.2630
– Platform 6.0: 06.01.23.2630

Thanks to Zhenyu Liu, independent firmware security researcher, for reporting the vulnerability and engaging in this coordinated disclosure.