CVE-2022-28722

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Certain HP Print Products are potentially vulnerable to Buffer Overflow.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
n/aCertain HP inkjet printers, HP LaserJet Pro printers, HP PageWide Pro printersMultiple

References

Timeline

Published
Sep 26, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-28735.5An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the ICVE-2022-287306.1A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execuCVE-2022-287316.5A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow thCVE-2022-287326.1A carefully crafted request on WeblogPlugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute CVE-2022-287338.1Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets(CVE-2022-287347.0Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal dataCVE-2022-287357.8The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded maCVE-2022-287367.8There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems thatCVE-2022-287377.8There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takesCVE-2022-287389.8A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp fromCVE-2022-287397.5There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-FloaCVE-2022-28745.5NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.
CVE-2022-28722: Critical severity, CVSS 9.8 | Vulnix