Every CVE Search/ Get API key

CVE-2026-8631

HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

9.3 CriticalFix available

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.81%Up 1.8 points since May 21, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.3

HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

Record
CVE-2026-8631
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-122, CWE-190
Updated
2026-11-02
EUVDEUVD-2026-31193 9.3

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

Record
EUVD-2026-31193
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-hcc9-h975-pvc2 9.3

A potential security vulnerability has been identified in the HP Linux Imaging and Printing...

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

Record
GHSA-hcc9-h975-pvc2
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-122, CWE-190
Updated
2026-11-02
NVD 9.3

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

Record
CVE-2026-8631
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-122, CWE-190
Updated
2026-11-02
OSVDEBIAN-CVE-2026-8631 9.8

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

Record
DEBIAN-CVE-2026-8631
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2483 9.3

hplip security update

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.

Security Fix(es):

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).(CVE-2025-43023)

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.(CVE-2026-8631)

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.(CVE-2026-8632)

Record
OESA-2026-2483
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
Show 31 moreShow less
OSVRHSA-2026:26228 9.8

Red Hat Security Advisory: hplip security update

Record
RHSA-2026:26228
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26297 9.8

Red Hat Security Advisory: hplip security update

Record
RHSA-2026:26297
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26335 9.8

Red Hat Security Advisory: hplip security update

Record
RHSA-2026:26335
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:48171 9.8

Red Hat Security Advisory: hplip security update

Record
RHSA-2026:48171
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:48586 9.8

Red Hat Security Advisory: hplip security update

Record
RHSA-2026:48586
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:48603 9.8

Red Hat Security Advisory: hplip security update

Record
RHSA-2026:48603
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:48606 9.8

Red Hat Security Advisory: hplip security, bug fix, and enhancement update

Record
RHSA-2026:48606
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:48959 9.8

Red Hat Security Advisory: hplip security update

Record
RHSA-2026:48959
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:48960 9.8

Red Hat Security Advisory: hplip security update

Record
RHSA-2026:48960
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:48961 9.8

Red Hat Security Advisory: hplip security update

Record
RHSA-2026:48961
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:26228 9.8

Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)

  • HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:26228
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:26297 9.8

Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)

  • HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:26297
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:26335 9.8

Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)

  • HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:26335
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-8631 9.3

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

Record
UBUNTU-CVE-2026-8631
CVSS 4.0
9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:26297 No score

Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)
  • HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:26297
Updated
2026-11-02
OSVALSA-2026:26335 No score

Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection (CVE-2026-8632)
  • HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups (CVE-2026-8631)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:26335
Updated
2026-11-02
OSVALSA-2026:39976 No score

Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:39976
Updated
2026-11-02
OSVALSA-2026:40831 No score

Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:40831
Updated
2026-11-02
OSVALSA-2026:40894 No score

Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.

Security Fix(es):

  • HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:40894
Updated
2026-11-02
OSVCLSA-2026-1782213578 No score

hplip: Fix of 2 CVEs

  • CVE-2026-8631: fix integer overflow in the hpcups processing path that could lead to privilege escalation / arbitrary code execution via crafted print data (backport of upstream HPLIP 3.26.4)
  • CVE-2026-8632: fix OS command injection in Is_Process_Running() by replacing the ps/grep shell pipeline with a safe /proc-based scan (backport of upstream HPLIP 3.26.4)
Record
CLSA-2026-1782213578
Updated
2026-11-02
OSVCLSA-2026-1782483693 No score

hplip: Fix of 2 CVEs

  • CVE-2026-8631: fix integer overflow in the hpcups processing path that could lead to privilege escalation / arbitrary code execution via crafted print data (backport of upstream HPLIP 3.26.4)
  • CVE-2026-8632: fix OS command injection in Is_Process_Running() by replacing the ps/grep shell pipeline with a safe /proc-based scan (backport of upstream HPLIP 3.26.4)
Record
CLSA-2026-1782483693
Updated
2026-11-02
OSVCLSA-2026-1784711548 No score

hplip: Fix of CVE-2026-14544

  • CVE-2026-14544: complete the incomplete CVE-2026-8631 integer overflow fix in the hpcups processing path (PCLmGenerator::Encapsulate), so the full whiteStripLen * srcNumComponents product is overflow-checked (backport of RHEL/AlmaLinux hplip-3.21.2-6.el9_8.5, RHSA-2026:40831)
Record
CLSA-2026-1784711548
Updated
2026-11-02
OSVCLSA-2026-1784715279 No score

hplip: Fix of CVE-2026-14544

  • CVE-2026-14544: fix integer overflow in the hpcups PCLm encapsulation path (PCLmGenerator::Encapsulate), an incomplete-fix follow-up to CVE-2026-8631 (backport of the Red Hat fix from hplip-3.21.2-6.el9_8.5)
Record
CLSA-2026-1784715279
Updated
2026-11-02
OSVMGASA-2026-0363 No score

Updated hplip package fixes security vulnerabilities

Potential Escalation of Privilege and Arbitrary Code Execution. (CVE-2026-8631, CVE-2026-8632)

Record
MGASA-2026-0363
Updated
2026-11-02
OSVopenSUSE-SU-2026:10860-1 No score

hplip-3.26.4-1.1 on GA media

These are all security issues fixed in the hplip-3.26.4-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10860-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20858-1 No score

Security update for hplip

This update for hplip fixes the following issues:

Changes in hplip:

  • Update to HPLIP 3.26.4

    • CVE-2026-8631: Fixed privileges escalation and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023)
    • CVE-2026-8632: Fixed privileges escalation and/or arbitrary code execution via operating system command injection (bsc#1266024)

  • Add support for the following new printers:

    • HP LaserJet Pro MFP 3106sdw
    • HP LaserJet Pro MFP 3105sdw
    • HP Envy 6500e series
    • HP Envy 6500 series
    • HP OfficeJet Pro 9730 Series
    • HP OfficeJet Pro 9730e Series
    • HP OfficeJet Pro 9720 Series
    • HP OfficeJet Pro 9720e Series
    • HP OfficeJet Pro 8130e All-in-One series
    • HP OfficeJet Pro 8130 All-in-One series
    • HP OfficeJet 8130e All-in-One series
    • HP OfficeJet 8130 All-in-One series
    • HP OfficeJet Pro 8120e All-in-One series
    • HP OfficeJet Pro 8120 All-in-One series
    • HP OfficeJet 8120e All-in-One series
    • HP OfficeJet 8120 All-in-One series
    • HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series
    • HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series
    • HP DeskJet 4300e All-in-One Printer series
    • HP DeskJet Ink Advantage 4300 All-in-One Printer series
    • HP DeskJet 4300 All-in-One Printer series
    • HP DeskJet 2900e All-in-One Printer series
    • HP DeskJet Ink Advantage 2900 All-in-One Printer series
    • HP DeskJet 2900 All-in-One Printer series

  • Update to HPLIP 3.25.8

  • Added support for the following new Printers:

    • HP LaserJet Enterprise Flow MFP 8601z
    • HP LaserJet Enterprise 5501
    • HP LaserJet Enterprise MFP 5601dn
    • HP LaserJet Enterprise 6500dn
    • HP LaserJet Enterprise 5501n
    • HP LaserJet Enterprise MFP 5601
    • HP LaserJet Enterprise 6500
    • HP LaserJet Enterprise 5502dn
    • HP LaserJet Enterprise MFP 5602dn
    • HP LaserJet Enterprise 6500n
    • HP LaserJet Enterprise 5502
    • HP LaserJet Enterprise MFP 5602f
    • HP LaserJet Enterprise 6501dn
    • HP LaserJet Enterprise X50452dn
    • HP LaserJet Enterprise Flow MFP 5602zfw
    • HP LaserJet Enterprise 6501
    • HP LaserJet Enterprise X50452
    • HP LaserJet Enterprise MFP 5602
    • HP LaserJet Enterprise X60257dn
    • HP LaserJet Enterprise MFP X53052dn
    • HP LaserJet Enterprise Flow MFP X530
    • HP LaserJet Enterprise X60257
    • HP LaserJet Enterprise MFP X53052
    • HP LaserJet Enterprise X60357dn
    • HP LaserJet Enterprise X60357
    • HP LaserJet Enterprise MFP 6600dn
    • HP LaserJet Enterprise Flow MFP 6600zfw
    • HP LaserJet Enterprise MFP 6600
    • HP LaserJet Enterprise Flow MFP 6600zfsw
    • HP LaserJet Enterprise MFP X62757dn
    • HP LaserJet Enterprise Flow MFP X62757zs
    • HP LaserJet Enterprise MFP X62757
    • DEX D50452dn
    • DEX MFP D53052dn

  • Fix handling of readfp() and read_filke() for ConfigParser objects, avoiding confusing error messages (lp#2139771)

  • Fix compiler warnings on SLE15

  • Fix "Found No Section" error with python (lp#2095776)

  • Fix PPD lookup by moving PPDs from manufacturer-PPDs/hplip-fax to manufacturer-PPDs/hplip/fax etc (boo#1257529)

  • Move more utilities from hplip-utils to hplip-base.

    • hplip-base now contains all utilities that are not totally useless and can run without the Qt GUI.

  • Update fix for support of new GPG key, as the key has now been uploaded to GPG keyservers (lp#2120738)

  • This fixes CVE-2025-43023 (bsc#1266031)

  • Drop dependency on cups-ppdc. It isn't necessary, as PPD generation on target system is done by cups-driverd.

  • The old and outdated 'hpijs' driver support is finally dropped (the 'hpcups' driver is the default driver since 2009) so that there is no need for foomatic-filters (boo#1250481)

  • Continue refactoring:

    • move GUI tools to "hplip-utils" subpackage
    • convert "hplip" into an empty metapackage that pulls in hplip-utils and all drivers / PPDs (except hpijs PPDs).

  • Refactor package structure:

    • hplip: full set of utilities. Pulls in almost all subpackages to deliver the…
Record
openSUSE-SU-2026:20858-1
Updated
2026-11-02
OSVSUSE-SU-2026:2222-1 No score

Security update for hplip

This update for hplip fixes the following issues

Security issues:

  • CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation (bsc#1266031).
  • CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023).
  • CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection (bsc#1266024).
  • Unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS). (bsc#1245358)
  • URI parameter injection via unsanitized USB serial number. (bsc#1209401)

Non security issues:

  • Can't set up fax for HP OfficeJet 3830 (bsc#1257529).
  • hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).
  • Update to HPLIP 3.26.4
Record
SUSE-SU-2026:2222-1
Updated
2026-11-02
OSVSUSE-SU-2026:2228-1 No score

Security update for hplip

This update for hplip fixes the following issues

Security issues:

  • CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation (bsc#1266031).
  • CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023).
  • CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection (bsc#1266024).
  • hplip: unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS) (bsc#1245358).

Non security issues:

  • Can't set up fax for HP OfficeJet 3830 (bsc#1257529).
  • hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).
  • Update to HPLIP 3.26.4.
Record
SUSE-SU-2026:2228-1
Updated
2026-11-02
OSVSUSE-SU-2026:2229-1 No score

Security update for hplip

This update for hplip fixes the following issues

Security issues:

  • CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation (bsc#1266031).
  • CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023).
  • CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection (bsc#1266024).
  • Unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS). (bsc#1245358)
  • URI parameter injection via unsanitized USB serial number. (bsc#1209401)

Non security issues:

  • Can't set up fax for HP OfficeJet 3830 (bsc#1257529).
  • hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).
  • Update to HPLIP 3.26.4
Record
SUSE-SU-2026:2229-1
Updated
2026-11-02
OSVSUSE-SU-2026:2380-1 No score

Security update for hplip

This update for hplip fixes the following issues

Update to HPLIP 3.26.4:

Security issues:

  • CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation (bsc#1266031).
  • CVE-2026-8631: escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path (bsc#1266023).
  • CVE-2026-8632: escalation of privileges and/or arbitrary code execution via operating system command injection (bsc#1266024).
  • unauthenticated remote (LAN) denial-of-service in the SLP parser (ReDoS) (bsc#1245358).
  • URI parameter injection via unsanitized USB serial number (bsc#1209401).

Non security issues:

  • Can't set up fax for HP OfficeJet 3830 (bsc#1257529).
  • hplip requires foomatic-filters which does not exist in Leap 16 (bsc#1250481).

Changes:

  • Add support for the following new printers:
  • HP LaserJet Pro MFP 3106sdw
  • HP LaserJet Pro MFP 3105sdw
  • HP Envy 6500e series
  • HP Envy 6500 series
  • HP OfficeJet Pro 9730 Series
  • HP OfficeJet Pro 9730e Series
  • HP OfficeJet Pro 9720 Series
  • HP OfficeJet Pro 9720e Series
  • HP OfficeJet Pro 8130e All-in-One series
  • HP OfficeJet Pro 8130 All-in-One series
  • HP OfficeJet 8130e All-in-One series
  • HP OfficeJet 8130 All-in-One series
  • HP OfficeJet Pro 8120e All-in-One series
  • HP OfficeJet Pro 8120 All-in-One series
  • HP OfficeJet 8120e All-in-One series
  • HP OfficeJet 8120 All-in-One series
  • HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series
  • HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series
  • HP DeskJet 4300e All-in-One Printer series
  • HP DeskJet Ink Advantage 4300 All-in-One Printer series
  • HP DeskJet 4300 All-in-One Printer series
  • HP DeskJet 2900e All-in-One Printer series
  • HP DeskJet Ink Advantage 2900 All-in-One Printer series
  • HP DeskJet 2900 All-in-One Printer series
  • HP LaserJet Enterprise Flow MFP 8601z
  • HP LaserJet Enterprise 5501
  • HP LaserJet Enterprise MFP 5601dn
  • HP LaserJet Enterprise 6500dn
  • HP LaserJet Enterprise 5501n
  • HP LaserJet Enterprise MFP 5601
  • HP LaserJet Enterprise 6500
  • HP LaserJet Enterprise 5502dn
  • HP LaserJet Enterprise MFP 5602dn
  • HP LaserJet Enterprise 6500n
  • HP LaserJet Enterprise 5502
  • HP LaserJet Enterprise MFP 5602f
  • HP LaserJet Enterprise 6501dn
  • HP LaserJet Enterprise X50452dn
  • HP LaserJet Enterprise Flow MFP 5602zfw
  • HP LaserJet Enterprise 6501
  • HP LaserJet Enterprise X50452
  • HP LaserJet Enterprise MFP 5602
  • HP LaserJet Enterprise X60257dn
  • HP LaserJet Enterprise MFP X53052dn
  • HP LaserJet Enterprise Flow MFP X530
  • HP LaserJet Enterprise X60257
  • HP LaserJet Enterprise MFP X53052
  • HP LaserJet Enterprise X60357dn
  • HP LaserJet Enterprise X60357
  • HP LaserJet Enterprise MFP 6600dn
  • HP LaserJet Enterprise Flow MFP 6600zfw
  • HP LaserJet Enterprise MFP 6600
  • HP LaserJet Enterprise Flow MFP 6600zfsw
  • HP LaserJet Enterprise MFP X62757dn
  • HP LaserJet Enterprise Flow MFP X62757zs
  • HP LaserJet Enterprise MFP X62757
  • DEX D50452dn
  • DEX MFP D53052dn
  • HP LaserJet Pro MFP M126a plus
  • HP LaserJet Pro MFP M126nw plus
  • HP LaserJet Pro MFP M126snw plus
  • HP Envy Photo 7200 series
  • HP Envy Photo 7900 series
  • HP OfficeJet Pro 9110 Series
  • HP OfficeJet 9120 Series
  • HP OfficeJet Pro 9120 Series
  • HP OfficeJet Pro 9130 Series
  • HP LaserJet Enterprise Flow MFP 8601z+
  • HP LaserJet Enterprise MFP 8601dn
  • HP Color LaserJet Enterprise MFP 8801dn
  • HP Color LaserJet Enterprise Flow MFP 8801z
  • HP Color LaserJet Enterprise Flow MFP 8801z+
  • HP LaserJet Enterprise 8501dn
  • HP LaserJet Enterprise 8501x
  • HP LaserJet Enterprise 8501x+
  • DEX MFP D826
  • DEX MFP D82640
  • DEX MFP D82650
  • DEX MFP D82660
  • DEX D50145
  • DEX MFP D42540
  • DEX MFP D52645
  • DEX Color D55745
  • DEX Color MFP D57945
  • DEX Color MFP D677
  • DEX Color MFP D67755
  • DEX Color MFP D67765
  • DEX Color MFP D877
  • DEX Color MFP D87740
  • DEX Color MFP…
Record
SUSE-SU-2026:2380-1
Updated
2026-11-02
OSVUSN-8483-1 No score

hplip vulnerabilities

It was discovered that HPLIP incorrectly handled certain print data. An attacker could possibly use this issue to cause HPLIP to execute arbitrary code. (CVE-2026-8631)

It was discovered that HPLIP incorrectly handled certain inputs. A local attacker could possibly use this issue to execute arbitrary code. (CVE-2026-8632)

Record
USN-8483-1
Updated
2026-11-02

Affected products

Show 6 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
hplip
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.21.2-6.el9_8.4.alma.1
3.21.2-6.el9_8.4.alma.1
hplip-common
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.21.2-6.el9_8.4.alma.1
3.21.2-6.el9_8.4.alma.1
hplip-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.21.2-6.el9_8.4.alma.1
3.21.2-6.el9_8.4.alma.1
libsane-hpaio
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.21.2-6.el9_8.4.alma.1
3.21.2-6.el9_8.4.alma.1
hplip
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.18.4-13.el8_10.alma.1
3.18.4-13.el8_10.alma.1
hplip-common
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.18.4-13.el8_10.alma.1
3.18.4-13.el8_10.alma.1
hplip-gui
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.18.4-13.el8_10.alma.1
3.18.4-13.el8_10.alma.1
hplip-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.18.4-13.el8_10.alma.1
3.18.4-13.el8_10.alma.1
libsane-hpaio
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.18.4-13.el8_10.alma.1
3.18.4-13.el8_10.alma.1
hplip
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.23.12-10.el10_2.5
3.23.12-10.el10_2.5
Show 72 moreShow less
Affected packages
PackageAffectedFixed
hplip-common
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.23.12-10.el10_2.5
3.23.12-10.el10_2.5
hplip-libs
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.23.12-10.el10_2.5
3.23.12-10.el10_2.5
libsane-hpaio
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.23.12-10.el10_2.5
3.23.12-10.el10_2.5
hplip
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.21.2-6.el9_8.5.alma.1
3.21.2-6.el9_8.5.alma.1
hplip-common
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.21.2-6.el9_8.5.alma.1
3.21.2-6.el9_8.5.alma.1
hplip-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.21.2-6.el9_8.5.alma.1
3.21.2-6.el9_8.5.alma.1
libsane-hpaio
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.21.2-6.el9_8.5.alma.1
3.21.2-6.el9_8.5.alma.1
hplip
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.18.4-14.el8_10.alma.1
3.18.4-14.el8_10.alma.1
hplip-common
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.18.4-14.el8_10.alma.1
3.18.4-14.el8_10.alma.1
hplip-gui
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.18.4-14.el8_10.alma.1
3.18.4-14.el8_10.alma.1
hplip-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.18.4-14.el8_10.alma.1
3.18.4-14.el8_10.alma.1
libsane-hpaio
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.18.4-14.el8_10.alma.1
3.18.4-14.el8_10.alma.1
hplip
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els1
3.21.2-6.el9.alma.tuxcare.els1
hplip-common
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els1
3.21.2-6.el9.alma.tuxcare.els1
hplip-libs
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els1
3.21.2-6.el9.alma.tuxcare.els1
libsane-hpaio
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els1
3.21.2-6.el9.alma.tuxcare.els1
hplip
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els1
3.21.2-6.el9.alma.tuxcare.els1
hplip-common
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els1
3.21.2-6.el9.alma.tuxcare.els1
hplip-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els1
3.21.2-6.el9.alma.tuxcare.els1
libsane-hpaio
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els1
3.21.2-6.el9.alma.tuxcare.els1
hplip
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els2
3.21.2-6.el9.alma.tuxcare.els2
hplip-common
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els2
3.21.2-6.el9.alma.tuxcare.els2
hplip-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els2
3.21.2-6.el9.alma.tuxcare.els2
libsane-hpaio
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els2
3.21.2-6.el9.alma.tuxcare.els2
hplip
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els2
3.21.2-6.el9.alma.tuxcare.els2
hplip-common
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els2
3.21.2-6.el9.alma.tuxcare.els2
hplip-libs
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els2
3.21.2-6.el9.alma.tuxcare.els2
libsane-hpaio
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.21.2-6.el9.alma.tuxcare.els2
3.21.2-6.el9.alma.tuxcare.els2
hplip
Debian:12
 before 3.22.10+dfsg0-2+deb12u1, plus listed versions
3.22.10+dfsg0-2
3.22.10+dfsg0-2+deb12u1
hplip
Debian:13
 before 3.22.10+dfsg0-8.1+deb13u1, plus listed versions
3.22.10+dfsg0-8.1
3.22.10+dfsg0-8.1+deb13u1
hplip
Mageia:9
From an advisory covering 2 CVEs
 before 3.22.10-4.2.mga9
3.22.10-4.2.mga9
hplip
openEuler:24.03-LTS-SP3
From an advisory covering 3 CVEs
 before 3.26.4-1.oe2403sp3
3.26.4-1.oe2403sp3
hplip
openEuler:20.03-LTS-SP4
From an advisory covering 3 CVEs
 before 3.26.4-1.oe2003sp4
3.26.4-1.oe2003sp4
hplip
openEuler:22.03-LTS-SP4
From an advisory covering 3 CVEs
 before 3.26.4-1.oe2203sp4
3.26.4-1.oe2203sp4
hplip
openEuler:24.03-LTS
From an advisory covering 3 CVEs
 before 3.26.4-1.oe2403sp1
3.26.4-1.oe2403sp1
hplip
openEuler:24.03-LTS-SP1
From an advisory covering 3 CVEs
 before 3.26.4-1.oe2403sp1
3.26.4-1.oe2403sp1
hplip
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:3.23.12-10.el10_2.4
0:3.23.12-10.el10_2.4
hplip
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.21.2-6.el9_8.4
0:3.21.2-6.el9_8.4
hplip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.18.4-13.el8_10
0:3.18.4-13.el8_10
hplip
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:3.21.2-6.el9_6.1
0:3.21.2-6.el9_6.1
hplip
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
 before 0:3.21.2-6.el9_4.1
0:3.21.2-6.el9_4.1
hplip
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:3.21.2-6.el9_2.1
0:3.21.2-6.el9_2.1
hplip
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:3.23.12-8.el10_0.2
0:3.23.12-8.el10_0.2
hplip
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.18.4-9.el8_8.1
0:3.18.4-9.el8_8.1
hplip
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.18.4-9.el8_8.1
0:3.18.4-9.el8_8.1
hplip
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.18.4-9.el8_4.1
0:3.18.4-9.el8_4.1
hplip
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.18.4-9.el8_4.1
0:3.18.4-9.el8_4.1
hplip
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.18.4-9.el8_6.1
0:3.18.4-9.el8_6.1
hplip
Red Hat:rhel_eus_long_life:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.18.4-9.el8_6.1
0:3.18.4-9.el8_6.1
hplip
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:3.23.12-10.el10_2.4
0:3.23.12-10.el10_2.4
hplip
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:3.21.2-6.el9_8.4
0:3.21.2-6.el9_8.4
hplip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.18.4-13.el8_10
0:3.18.4-13.el8_10
hplip
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 3.26.4-150400.3.22.1
3.26.4-150400.3.22.1
hplip
Ubuntu:16.04:LTS
 All versions, plus listed versions
3.15.7-0ubuntu43.15.7-0ubuntu53.15.11-0ubuntu13.15.11+repack0-13.15.11+repack0-1ubuntu1
Show 4 moreShow less
3.16.2+repack0-13.16.2+repack0-1ubuntu13.16.2+repack0-33.16.3+repack0-1
 None known
hplip
Ubuntu:18.04:LTS
 All versions, plus listed versions
3.17.7+repack0-33.17.10+repack0-13.17.10+repack0-23.17.10+repack0-33.17.10+repack0-43.17.10+repack0-5
 None known
hplip
Ubuntu:20.04:LTS
 All versions, plus listed versions
3.19.6+dfsg0-1ubuntu13.19.8+dfsg0-73.19.11+dfsg0-13.19.12+dfsg0-13.19.12+dfsg0-2
Show 6 moreShow less
3.19.12+dfsg0-33.19.12+dfsg0-3ubuntu13.19.12+dfsg0-4ubuntu13.20.3+dfsg0-13.20.3+dfsg0-23.20.3+dfsg0-2ubuntu0.1
 None known
hplip
Ubuntu:22.04:LTS
 before 3.21.12+dfsg0-1ubuntu0.1, plus listed versions
3.21.6+dfsg0-0ubuntu13.21.8+dfsg0-23.21.12+dfsg0-1
3.21.12+dfsg0-1ubuntu0.1
hplip
Ubuntu:24.04:LTS
 before 3.23.12+dfsg0-0ubuntu5.1, plus listed versions
3.22.10+dfsg0-2ubuntu13.22.10+dfsg0-2ubuntu23.23.12+dfsg0-0ubuntu43.23.12+dfsg0-0ubuntu5
3.23.12+dfsg0-0ubuntu5.1
hplip
Ubuntu:25.10
 before 3.24.4+dfsg0-0ubuntu5.2, plus listed versions
3.24.4+dfsg0-0ubuntu5
3.24.4+dfsg0-0ubuntu5.2
hplip
Ubuntu:26.04:LTS
 before 3.24.4+dfsg0-0ubuntu8.1, plus listed versions
3.24.4+dfsg0-0ubuntu53.24.4+dfsg0-0ubuntu73.24.4+dfsg0-0ubuntu8
3.24.4+dfsg0-0ubuntu8.1
hplip
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 3.21.12+dfsg0-1ubuntu0.1, plus listed versions
3.21.6+dfsg0-0ubuntu13.21.8+dfsg0-23.21.12+dfsg0-1
3.21.12+dfsg0-1ubuntu0.1
hplip
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 3.23.12+dfsg0-0ubuntu5.1, plus listed versions
3.22.10+dfsg0-2ubuntu13.22.10+dfsg0-2ubuntu23.23.12+dfsg0-0ubuntu43.23.12+dfsg0-0ubuntu5
3.23.12+dfsg0-0ubuntu5.1
hplip
Ubuntu:25.10
From an advisory covering 2 CVEs
 before 3.24.4+dfsg0-0ubuntu5.2, plus listed versions
3.24.4+dfsg0-0ubuntu5
3.24.4+dfsg0-0ubuntu5.2
hplip
Ubuntu:26.04:LTS
From an advisory covering 2 CVEs
 before 3.24.4+dfsg0-0ubuntu8.1, plus listed versions
3.24.4+dfsg0-0ubuntu53.24.4+dfsg0-0ubuntu73.24.4+dfsg0-0ubuntu8
3.24.4+dfsg0-0ubuntu8.1
hplip
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 3.26.4-1.1
3.26.4-1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-8631 is a critical vulnerability (CVSS 9.3) in Hp Linux Imaging And Printing, published May 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. Fixed in hplip 3.22.10+dfsg0-2+deb12u1.

References

Show 71 moreShow less
This page doesn't list everything

Left out here: the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open