A potential security vulnerability has been identified in the HPAudioAnalytics service included in the HP Hotkey Support software, which might allow escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.8 | CVE-2025-43490 |
Exploitation
To exploit this vulnerability, an attacker with local access to the system could leverage the HPAudioAnalytics service to escalate privileges. This requires low privileges and no user interaction, making it a potential risk for systems where users have access to the service.
Affected Products
- HP Hotkey Support: This software includes the HPAudioAnalytics service, which is vulnerable to privilege escalation.
Mitigation
HP is actively releasing software updates to address this vulnerability. Users are advised to apply these updates as soon as they become available to mitigate the risk of exploitation.