Unvalidated Memory Boundary Vulnerability in HP Software
CVE-2026-12855

8.2HIGH

Key Information:

Vendor

Insyde Software

Status
Insydeh2o
Vendor
CVE Published:
9 September 2026

What is CVE-2026-12855?

A vulnerability exists within HP Software due to an unvalidated memory boundary, which may allow an attacker to execute arbitrary code. This flaw can lead to significant security risks, as it may expose the system to unauthorized manipulation or intrusion. Proper validation of memory boundaries is essential to prevent exploitation and safeguard the integrity of the affected software applications.

Affected Version(s)

InsydeH2O x86 See in the Solution

References

https://www.insyde.com/security-pledge/sa-2026009/

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.