CVE-2019-10627
Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the...
Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2
- Record
CVE-2019-10627- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119, CWE-131, CWE-190
- Updated
- 2026-11-02
CVE List No score
Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2
- Record
CVE-2019-10627- Updated
- 2026-11-02
EUVDEUVD-2019-2431 No score
Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2
- Record
EUVD-2019-2431- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wh76-54fj-93q5
Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the...
Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2
- Record
GHSA-wh76-54fj-93q5- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119, CWE-190
- Updated
- 2026-11-02
Affected products
- qualcomm ips
- qualcomm, inc. postscript and pdf printers that use ips versions prior to 2019.2
- hp 2dr21d firmware
- hp d3q15a firmware
- hp d3q15b firmware
- hp d3q15d firmware
- hp d3q16a firmware
- hp d3q16d firmware
- hp d3q17a firmware
- hp d3q17d firmware
- hp d3q19a firmware
- hp d3q19b firmware
Show 31 moreShow less
- hp d3q19d firmware
- hp d3q20a firmware
- hp d3q20b firmware
- hp d3q20c firmware
- hp d3q20d firmware
- hp d3q21a firmware
- hp d3q21b firmware
- hp d3q21c firmware
- hp d3q21d firmware
- hp d9l63a firmware
- hp d9l64a firmware
- hp j3p65a firmware
- hp j3p68a firmware
- hp j6u51b firmware
- hp j6u55a firmware
- hp j6u55d firmware
- hp j6u57a firmware
- hp j6u57b firmware
- hp j9v78b firmware
- hp j9v80a firmware
- hp j9v80b firmware
- hp j9v82a firmware
- hp j9v82d firmware
- hp k9z74a firmware
- hp k9z74d firmware
- hp k9z76a firmware
- hp k9z76b firmware
- hp k9z76d firmware
- hp t0g70a firmware
- hp w2z52b firmware
- hp w2z53b firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-10627 is a critical vulnerability (CVSS 9.8) in Qualcomm Ips, published November 21, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.35%, the 71st percentile. No source names a fixed version.