{"id":"CVE-2026-14544","aliases":["ALSA-2026:39976","ALSA-2026:40831","ALSA-2026:40894","CLSA-2026-1784711548","CLSA-2026-1784715279","DEBIAN-CVE-2026-14544","EUVD-2026-41515","GHSA-vwpr-fv2p-8c56","OESA-2026-4336","OESA-2026-4337","OESA-2026-4338","OESA-2026-4339","RHSA-2026:39976","RHSA-2026:40831","RHSA-2026:40894","RLSA-2026:39976","RLSA-2026:40831","RLSA-2026:40894","UBUNTU-CVE-2026-14544"],"status":"published","title":"Hplip: incomplete fix for cve-2026-8631","description":"A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.012,"percentile":0.68602,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2026-07-03T07:26:00Z","modified":"2026-11-04T22:17:59Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"hplip","fixed_in":["0:3.23.12-10.el10_2.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"hplip","fixed_in":["0:3.21.2-6.el9_8.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"hplip","fixed_in":["0:3.18.4-14.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"hplip","fixed_in":["0:3.23.12-10.el10_2.5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"hplip","fixed_in":["0:3.21.2-6.el9_8.5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"hplip","fixed_in":["0:3.18.4-14.el8_10"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.12-10.el10_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.12-10.el10_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.12-10.el10_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.12-10.el10_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9_8.5.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.4-14.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.4-14.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.4-14.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.4-14.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.4-14.el8_10.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"hplip-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"hplip-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsane-hpaio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.2-6.el9.alma.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.oe2203sp4"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.oe2403sp1"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.oe2403sp3"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.26.6-1.oe2403sp4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.23.12-10.el10_2.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.2-6.el9_8.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.4-14.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.23.12-10.el10_2.5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.2-6.el9_8.5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.4-14.el8_10"}]}]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"hplip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.24.4+dfsg0-0ubuntu5","3.24.4+dfsg0-0ubuntu5.2"]}],"products":[{"vendor":"hp","product":"hplip"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:39976","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40831","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40894","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-14544","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496772","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14544","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vwpr-fv2p-8c56"},{"url":"https://bugzilla.redhat.com/2496772","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-39976.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-40831.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-40894.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784711548.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784715279.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-14544","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4336","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91103","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91106","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4337","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4338","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4339","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39976.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-14544","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40831.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40894.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:39976","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:40831","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:40894","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-14544","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-14544","title":"Hplip: incomplete fix for cve-2026-8631","description":"A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.","status":"published","published":"2026-07-03T07:26:00.402Z","modified":"2026-11-04T22:00:54.144Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-04T23:40:09.798467Z"}],"euvd":[{"id":"EUVD-2026-41515","description":"A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.","status":"published","published":"2026-07-03T07:26:00Z","modified":"2026-11-04T22:00:54Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-04T23:47:18.620008Z"}],"ghsa":[{"id":"GHSA-vwpr-fv2p-8c56","title":"A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an...","description":"A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.","status":"published","published":"2026-07-03T09:31:28Z","modified":"2026-07-16T12:32:27Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:09:33.90316Z"}],"nvd":[{"id":"CVE-2026-14544","description":"A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.","status":"published","published":"2026-07-03T08:16:24.433Z","modified":"2026-11-04T22:17:59.267Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-04T23:43:39.147797Z"}],"osv":[{"id":"DEBIAN-CVE-2026-14544","description":"A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.","status":"withdrawn","published":"2026-07-03T08:16:24.433Z","modified":"2026-07-26T14:00:41.230825106Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:51.8748Z"},{"id":"OESA-2026-4336","title":"hplip security update","description":"The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.(CVE-2026-14544)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91098)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91101)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91102)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91103)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91104)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91105)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91106)","status":"published","published":"2026-10-16T11:59:29Z","modified":"2026-10-16T12:15:19.064275517Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4337","title":"hplip security update","description":"The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.(CVE-2026-14544)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91098)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91101)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91102)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91103)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91104)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91105)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91106)","status":"published","published":"2026-10-16T11:59:30Z","modified":"2026-10-16T12:15:19.065152493Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4338","title":"hplip security update","description":"The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.(CVE-2026-14544)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91098)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91101)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91102)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91103)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91104)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91105)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91106)","status":"published","published":"2026-10-16T11:59:31Z","modified":"2026-10-16T12:15:19.070229816Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4339","title":"hplip security update","description":"The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.(CVE-2026-14544)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91098)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91101)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91102)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91103)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91104)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91105)\n\nHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.(CVE-2026-91106)","status":"published","published":"2026-10-16T11:59:31Z","modified":"2026-10-16T12:15:19.962333761Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"RHSA-2026:39976","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-07-16T10:10:40Z","modified":"2026-08-22T10:23:59Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:40831","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-07-16T10:10:45Z","modified":"2026-08-22T10:24:05Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:40894","title":"Red Hat Security Advisory: hplip security update","status":"published","published":"2026-07-17T10:09:47Z","modified":"2026-08-22T10:24:06Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RLSA-2026:39976","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-16T12:05:50.790754Z","modified":"2026-07-16T12:30:04.933543719Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:40831","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-17T12:03:25.223367Z","modified":"2026-07-17T12:30:05.763211609Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:40894","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.\n\nSecurity Fix(es):\n\n* HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-17T06:00:27.302196Z","modified":"2026-07-17T06:30:05.416424307Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-14544","description":"A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.","status":"published","published":"2026-07-03T08:16:00Z","modified":"2026-07-16T20:50:02.78126184Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:56:00.592716Z"},{"id":"ALSA-2026:39976","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-15T00:00:00Z","modified":"2026-10-29T11:30:33.447112525Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:40831","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-16T00:00:00Z","modified":"2026-10-29T11:31:39.424929756Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:40894","title":"Important: hplip security update","description":"The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project (HPLIP), which provides drivers for Hewlett-Packard printers and multi-function peripherals.  \n\nSecurity Fix(es):  \n\n  * HPLIP: Incomplete Fix for CVE-2026-8631 (CVE-2026-14544)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-16T00:00:00Z","modified":"2026-10-29T11:02:24.704645661Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"CLSA-2026-1784711548","title":"hplip: Fix of CVE-2026-14544","description":"- CVE-2026-14544: complete the incomplete CVE-2026-8631 integer overflow fix\n  in the hpcups processing path (PCLmGenerator::Encapsulate), so the full\n  whiteStripLen * srcNumComponents product is overflow-checked (backport of\n  RHEL/AlmaLinux hplip-3.21.2-6.el9_8.5, RHSA-2026:40831)","status":"published","published":"2026-07-22T09:12:54Z","modified":"2026-10-26T09:30:11.707018047Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1784715279","title":"hplip: Fix of CVE-2026-14544","description":"- CVE-2026-14544: fix integer overflow in the hpcups PCLm encapsulation path\n  (PCLmGenerator::Encapsulate), an incomplete-fix follow-up to CVE-2026-8631\n  (backport of the Red Hat fix from hplip-3.21.2-6.el9_8.5)","status":"published","published":"2026-07-22T10:15:03Z","modified":"2026-10-26T09:31:23.85371148Z","updated_at":"2026-11-02T15:43:46.482572Z"}]}}