CVE-2026-12855: H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.

Published Sep 9, 2026

Updated

Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects.

Affected Software

1 affected component

H19WMIHandlerSmm=

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade HP Platform to a version that resolves this vulnerability.
Fixed in 05.47.2701.2631
Upgrade
Upgrade HP Platform to a version that resolves this vulnerability.
Fixed in 05.55.45.2630
Upgrade
Upgrade HP Platform to a version that resolves this vulnerability.
Fixed in 05.62.29.2630
Upgrade
Upgrade HP Platform to a version that resolves this vulnerability.
Fixed in 05.72.21.2630
Upgrade
Upgrade HP Platform to a version that resolves this vulnerability.
Fixed in 06.01.23.2630

Event History

Sep 9, 2026

CVE Published

via MITRE·03:59 AM

Data Sourced

via MITRE·03:59 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker needs local access and high privileges. No user interaction is required according to the CVSS vector.

Which environments are most likely to be affected?

The vulnerable code was developed specifically for HP projects. The provided information identifies H19WMIHandlerSmm but does not list affected device models, firmware versions, or configurations.

What is the potential impact after exploitation?

Successful exploitation could result in arbitrary code execution. The CVSS vector indicates high impact to confidentiality, integrity, and availability, with a changed scope.