CVE Database›Document archive›CVE-2026-8631

CVE-2026-8631

HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups

Loading…

Severity

Important

Red Hat Product Security

9.8

CVSS 3.1

Review impact separately from score.

Published · May 21, 2026

Updated · August 3, 2026

Description

A flaw was found in HP Linux Imaging and Printing Software (HPLIP). An integer overflow in the hpcups processing path when handling crafted print data may lead to arbitrary code execution or privilege escalation on the affected system.

Statement

HPLIP's hpcups component is vulnerable to integer overflow when processing crafted print data. A remote attacker who can submit print job content to the hpcups filter path may achieve arbitrary code execution or privilege escalation on systems using HPLIP for printing.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190 · Integer Overflow or Wraparound