CVE-2019-6327

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an IPP Parser potentially vulnerable to Buffer Overflow.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Jun 17, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-63287.8HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files.CVE-2019-63297.8HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files.CVE-2019-63309.8A potential security vulnerability has been identified in the software solution HP Access Control versions prior to 16.7. This vulnerability CVE-2019-63313.3An issue was found in Samsung Mobile Print (Android) versions prior to 4.08.007. A potential security vulnerability caused by incomplete obf CVE-2019-63324.8A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-CVE-2019-63336.7A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version 4.1.4.2827. This vu CVE-2019-63349.8HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow pot CVE-2019-63357.5A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially be exploited to cre CVE-2019-63375.2For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the CVE-2019-63388.0In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; Drupal core uses the third-party PEAR Archive_Tar CVE-2019-63399.8In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; A remote code execution vulnerability exists in PH CVE-2019-63408.1Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can