CVE-2019-16240

A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro…

published November 9, 2021

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

⚠️ A crafty print file can throw your HP printer into chaos! Certain HP Inkjet printers may produce a core dump when fed a malicious document, leaving them a bit too exposed. 🔥 Think of it like a restaurant where a chef takes a special order but doesn’t realize the recipe is missing crucial ingredients. When the meal is prepared, it causes a meltdown in the kitchen! In the worst-case scenario, an attacker could exploit this vulnerability to crash the printer, leading to potential information disclosure through the core dump. While it may sound alarming, this isn't actively exploited, but it still leaves the door ajar for possible mischief.

Put simply

Think of it like a restaurant where a chef takes a special order but doesn’t realize the recipe is missing crucial ingredients. When the meal is prepared, it causes a meltdown in the kitchen! This vulnerability affects HP OfficeJet Pro, PageWide Managed, and PageWide Pro Printers running versions before 001.1937C and 001.1937D, respectively. It allows a crafted print file to cause a buffer overflow, resulting in unexpected behavior and a core dump to a local device.

What to do

In the worst-case scenario, an attacker could exploit this vulnerability to crash the printer, leading to potential information disclosure through the core dump. While it may sound alarming, this isn't actively exploited, but it still leaves the door ajar for possible mischief. To safeguard your printers, upgrade them to the latest firmware versions: 001.1937C for OfficeJet Pro or 001.1937D for PageWide models. Regularly check for updates to ensure your devices stay secure—your printer deserves the best protection! You've got this! By staying proactive and updating your devices, you’ll keep your printing secure and reliable. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01348 · 71.2th percentile
Published
2021-11-09T14:37Z
EPSS history
Timeline
  • 09 NOV 14:37Z
    A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro…
    cvelistv5