CVE-2025-10577
BaseFortify
Publication date: 2025-10-15
Last updated on: 2025-10-16
Assigner: HP Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| hp | audio_package | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-266 | A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor. |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
Apply the updated audio packages released by HP for the affected PC products using the Sound Research SECOMN64 driver to mitigate the potential vulnerabilities.
Can you explain this vulnerability to me?
This vulnerability involves potential security weaknesses in the audio package for certain HP PC products that use the Sound Research SECOMN64 driver. These weaknesses might allow an attacker to escalate their privileges on the affected system.
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an attacker with limited privileges to gain higher-level access on the affected HP PC, potentially leading to unauthorized actions or control over the system.