BaseFortify

Publication date: 2025-12-03

Last updated on: 2025-12-05

Assigner: HP Inc.

Description

A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability could potentially allow a local attacker to escalate privileges via a race condition when installing packages.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-03

Last Modified

2025-12-05

Generated

2026-07-06

AI Q&A

2025-12-03

EPSS Evaluated

2026-07-05

NVD

CVE-2025-13492

Affected Vendors & Products

Vendor	Product	Version / Range
hp	image_assistant	to 5.3.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-363	The product checks the status of a file or directory before accessing it, which produces a race condition in which the file can be replaced with a link before the access is performed, causing the product to access the wrong file.

Attack-Flow Graph

Executive Summary

This vulnerability is a potential security issue in HP Image Assistant versions prior to 5.3.3. It involves a race condition during package installation that could allow a local attacker to escalate their privileges on the system.

Impact Analysis

The vulnerability could allow a local attacker to gain higher privileges than intended, potentially leading to unauthorized access or control over the affected system.

Hi! I’m here to help you understand CVE-2025-13492. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70