Login Request a demo
Critical severity · published Nov 21, 2019
CVE-2019-10627
Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size…
9.8
CVSS
1.4%
EPSS
No
On KEV
Description
Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
2F
2dr21d Firmware · HP
before 001.1937d · source: NVD
DF
D3q15a Firmware · HP
before 001.1937d · source: NVD
DF
D3q15b Firmware · HP
before 001.1937d · source: NVD
DF
D3q15d Firmware · HP
before 001.1937d · source: NVD
DF
D3q16a Firmware · HP
before 001.1937d · source: NVD
DF
D3q16d Firmware · HP
before 001.1937d · source: NVD
DF
D3q17a Firmware · HP
before 001.1937d · source: NVD
DF
D3q17d Firmware · HP
before 001.1937d · source: NVD
DF
D3q19a Firmware · HP
before 001.1937d · source: NVD
DF
D3q19b Firmware · HP
before 001.1937d · source: NVD
DF
D3q19d Firmware · HP
before 001.1937d · source: NVD
DF
D3q20a Firmware · HP
before 001.1937d · source: NVD
Affected product
2F
2dr21d Firmware
HP
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-10627
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-10627
Vendor Advisory
https://support.hp.com/us-en/document/c06458150
Third Party Advisory
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin
More from 2dr21d Firmware
5.2
CVE-2019-6337
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert