HP Audio Package Privilege Escalation Vulnerability in Certain PC Products

A privilege escalation vulnerability has been identified in the audio package of specific HP PC products that utilize the Sound Research SECOMN64 driver. HP is releasing updated audio packages to address this vulnerability.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

The vulnerabilities have been fixed in the Sonitude Audio Effects Component Driver version 2.1.1.27 or higher. HP has identified affected platforms and corresponding SoftPaqs with minimum versions that mitigate the vulnerabilities. Users should check the HP Customer Support - Software and Driver Downloads site for the latest update for their product model.