Skip to main content

HP Linux Imaging and Printing EUVD-2026-31193

| CVE-2026-8631 CRITICAL
Heap-based Buffer Overflow (CWE-122)
2026-05-20 hp-security-alert@hp.com GHSA-hcc9-h975-pvc2
9.3
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Patch available
May 20, 2026 - 22:02 EUVD
Analysis Generated
May 20, 2026 - 21:30 vuln.today

DescriptionNVD

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

AnalysisAI

Heap-based integer overflow in the hpcups component of HP Linux Imaging and Printing Software (HPLIP) allows attackers to achieve arbitrary code execution and/or privilege escalation by submitting crafted print data. The CVSS 4.0 base score of 9.3 reflects network-reachable exploitation against the printing subsystem with no authentication or user interaction required, though no public exploit identified at time of analysis and the issue has not been added to CISA KEV.

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Inventory all systems running HPLIP, particularly print servers and Linux-based multifunction devices in your environment. Within 7 days: Implement network segmentation to restrict direct network access to printing infrastructure from untrusted networks; disable unnecessary remote printing protocols (IPP, SNMP) where operationally feasible; restrict print server access to authorized subnets using firewall rules. …

Sign in for detailed remediation steps.

Vendor StatusVendor

Share

EUVD-2026-31193 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy