CVE-2019-6334

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potential execution of arbitrary code.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	HP Color LaserJet CM4540 MFP,HP Color LaserJet Managed flow MFP M880zm,HP Color LaserJet Enterprise flow MFP M880z,HP Color LaserJet Enterprise M552,HP Color LaserJet Managed M553,HP Color LaserJet En	Multiple

References

https://support.hp.com/us-en/document/c06447795Vendor Advisory
https://support.hp.com/us-en/document/c06447795Vendor Advisory

Timeline

Published: Oct 16, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-63357.5A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially be exploited to cre CVE-2019-63375.2For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the CVE-2019-63388.0In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; Drupal core uses the third-party PEAR Archive_Tar CVE-2019-63399.8In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; A remote code execution vulnerability exists in PH CVE-2019-63408.1Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can CVE-2019-63415.4In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prior to 8.6.13;Drupal 8.5 versions prior to 8.5.14. Under certain circumstances the CVE-2019-63429.8An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disablin CVE-2019-64389.8SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.CVE-2019-64399.8examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow.CVE-2019-64409.8Zemana AntiMalware before 3.0.658 Beta mishandles update logic.CVE-2019-64419.8An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices.CVE-2019-64426.5An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config re