EUVD-2026-80992
GHSA-mq8j-7fcj-wmh8
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable heap overflow needing no auth but requiring the victim to process malicious input (UI:R); worst-case bundled flaw yields RCE, so C/I/A:H, scope unchanged.
Primary rating from Vendor (hp).
CVSS VectorVendor: hp
Lifecycle Timeline
4DescriptionCVE.org
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
AnalysisAI
Heap-based buffer overflows and related memory-safety flaws in HPLIP (HP Linux Imaging and Printing Software) let remote attackers corrupt memory in the print, scan, and device-discovery stack, potentially yielding remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. Only Linux hosts with HPLIP installed and actively processing attacker-influenced input - a crafted print job, a rogue printer/scanner response, or a file handled by the HPLIP stack - are affected, and exploitation is gated on active user interaction (initiating or accepting the malicious print/scan operation) rather than being a fully autonomous remote exploit. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires HPLIP (HP Linux Imaging and Printing Software) installed and actively processing attacker-influenced input - a crafted print job, scanner/device response, or file handled by the HPLIP stack. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine priority for Linux fleets that use HP printers, but the aggregate nature of the advisory limits precision. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Patch available per vendor advisory: HP has remediated the reported issues and published HP Security Bulletin HPSBPI04151 (https://support.hp.com/us-en/document/ish_15646959-15646984-16/hpsbpi04151), so the primary action is to install the fixed HPLIP release - either the updated HP-supplied package from the bulletin or the distribution's patched hplip package once your vendor ships it - and verify the installed version afterwards. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every Linux host running HPLIP (check with 'hp-check', 'dpkg -l | grep hplip', or 'rpm -qa | grep hplip'), record the installed HPLIP release and whether CUPS, hpcups, hp-systray, and saned are enabled, and eliminate the attack surface on hosts that do not print or scan by removing the HPLIP packages entirely; on hosts that do print, restrict printer and scanner discovery (disable automatic/network printer discovery and limit mDNS/Bonjour via Avahi and CUPS browsing to trusted internal subnets) so untrusted devices cannot inject responses into the imaging stack. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Heap-based buffer overflow (CWE-122) in HP's HPLIP - the HP Linux Imaging and Printing Software stack shipped as the def
Heap-based buffer overflow and related memory-safety flaws in HP Linux Imaging and Printing (HPLIP) can allow remote cod
HPLIP (HP Linux Imaging and Printing Software) is affected by multiple heap-based buffer overflow vulnerabilities (CWE-1
Command injection weaknesses in HP Linux Imaging and Printing Software (HPLIP) allow a local attacker to execute arbitra
Out-of-bounds write flaws in HPLIP (HP Linux Imaging and Printing Software) can corrupt memory when a user processes att
Command injection (CWE-78) in HP's HPLIP (HP Linux Imaging and Printing) software enables an unauthenticated local user
Denial of service in HP's HPLIP (HP Linux Imaging and Printing Software) printing stack is reachable when a physically-p
Denial of service in HP Linux Imaging and Printing Software (HPLIP) can be triggered by a physically present attacker wh
Local attackers with valid credentials on Linux systems running HPLIP can exploit symbolic-link handling flaws (CWE-61)
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today