EUVD-2026-80988
GHSA-52x8-q22p-3rrf
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable, unauthenticated OOB write requiring victim interaction (UI:R); high integrity from code/file modification, low confidentiality and availability per vendor 4.0 impacts.
Primary rating from Vendor (hp).
CVSS VectorVendor: hp
Lifecycle Timeline
4DescriptionCVE.org
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
AnalysisAI
Out-of-bounds write flaws in HPLIP (HP Linux Imaging and Printing Software) can corrupt memory when a user processes attacker-influenced input such as a crafted print job, a malicious device or network response, or a handled file, with the affected product confirmed by HP and documented in advisory HPSBPI04151. No authentication is required to reach the vulnerable components, but exploitation depends on mandatory user interaction and on hosts that actually have HPLIP installed and in active printing or scanning use. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a host running HPLIP (HP's Linux Imaging and Printing driver stack, used with HP printers/scanners) and active user interaction (UI:A) - the victim must process attacker-influenced input such as a crafted print job, malicious device/network response, or handled file that reaches a vulnerable HPLIP component. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is an umbrella advisory (HPSBPI04151, CWE-787 out-of-bounds write) rolling up multiple externally reported HPLIP flaws whose worst-case impacts span RCE, privilege escalation, DoS, information disclosure, and file modification. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | HP states it has identified and remediated these findings, so the primary action is to apply the vendor fix per advisory HPSBPI04151 (https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151) - patch status is 'Patch available per vendor advisory'; no single exact fix version is published in the supplied data, so obtain the fixed HPLIP build from HP or your distribution's package repository and verify the installed version against the advisory rather than assuming a version number. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Linux endpoints and servers with HPLIP installed, identify affected versions against HP advisory HPSBPI04151, and determine which hosts are in active printing or scanning use; temporarily disable or remove HPLIP where not essential, restrict untrusted print jobs, device or network responses, and handled files from reaching affected components, and monitor for crashes or abnormal file activity. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Heap-based buffer overflow (CWE-122) in HP's HPLIP - the HP Linux Imaging and Printing Software stack shipped as the def
Heap-based buffer overflow and related memory-safety flaws in HP Linux Imaging and Printing (HPLIP) can allow remote cod
HPLIP (HP Linux Imaging and Printing Software) is affected by multiple heap-based buffer overflow vulnerabilities (CWE-1
Heap-based buffer overflows and related memory-safety flaws in HPLIP (HP Linux Imaging and Printing Software) let remote
Command injection weaknesses in HP Linux Imaging and Printing Software (HPLIP) allow a local attacker to execute arbitra
Command injection (CWE-78) in HP's HPLIP (HP Linux Imaging and Printing) software enables an unauthenticated local user
Denial of service in HP's HPLIP (HP Linux Imaging and Printing Software) printing stack is reachable when a physically-p
Denial of service in HP Linux Imaging and Printing Software (HPLIP) can be triggered by a physically present attacker wh
Local attackers with valid credentials on Linux systems running HPLIP can exploit symbolic-link handling flaws (CWE-61)
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today