CVE-2019-10627

CRITICAL

9.8

Description

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published11/21/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

hp:2dr21dhp:2dr21d_firmwarehp:d3q15ahp:d3q15a_firmwarehp:d3q15bhp:d3q15b_firmwarehp:d3q15dhp:d3q15d_firmwarehp:d3q16ahp:d3q16a_firmwarehp:d3q16dhp:d3q16d_firmwarehp:d3q17ahp:d3q17a_firmwarehp:d3q17dhp:d3q17d_firmwarehp:d3q19ahp:d3q19a_firmwarehp:d3q19bhp:d3q19b_firmwarehp:d3q19dhp:d3q19d_firmwarehp:d3q20ahp:d3q20a_firmwarehp:d3q20bhp:d3q20b_firmwarehp:d3q20chp:d3q20c_firmwarehp:d3q20dhp:d3q20d_firmwarehp:d3q21ahp:d3q21a_firmwarehp:d3q21bhp:d3q21b_firmwarehp:d3q21chp:d3q21c_firmwarehp:d3q21dhp:d3q21d_firmwarehp:d9l63ahp:d9l63a_firmwarehp:d9l64ahp:d9l64a_firmwarehp:j3p65ahp:j3p65a_firmwarehp:j3p68ahp:j3p68a_firmwarehp:j6u51bhp:j6u51b_firmwarehp:j6u55ahp:j6u55a_firmwarehp:j6u55dhp:j6u55d_firmwarehp:j6u57ahp:j6u57a_firmwarehp:j6u57bhp:j6u57b_firmwarehp:j9v78bhp:j9v78b_firmwarehp:j9v80ahp:j9v80a_firmwarehp:j9v80bhp:j9v80b_firmwarehp:j9v82ahp:j9v82a_firmwarehp:j9v82dhp:j9v82d_firmwarehp:k9z74ahp:k9z74a_firmwarehp:k9z74dhp:k9z74d_firmwarehp:k9z76ahp:k9z76a_firmwarehp:k9z76bhp:k9z76b_firmwarehp:k9z76dhp:k9z76d_firmwarehp:t0g70ahp:t0g70a_firmwarehp:w2z52bhp:w2z52b_firmwarehp:w2z53bhp:w2z53b_firmwarequalcomm:ips

Weaknesses (CWE)

CWE-119CWE-131CWE-190

References

https://support.hp.com/us-en/document/c06458150(product-security@qualcomm.com)

https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin(product-security@qualcomm.com)

https://support.hp.com/us-en/document/c06458150(af854a3a-2127-422b-91ae-364da2661108)

https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.