CVE-2026-8631

CriticalCVSS 9.8/10Last modified Aug 4, 2026

Description

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122 CWE-190

Affected software

Vendor	Product	Versions
HP Inc	HP Linux Imaging and Printing Software	< 3.26.4
Red Hat	Red Hat Enterprise Linux 10	—
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	—
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	—
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	—
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	—
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	—
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	—
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	—
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—

References

Timeline

Published: May 20, 2026
Last modified: Aug 4, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-863106.3A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /page CVE-2026-863116.4The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Shortco CVE-2026-863137.8Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue affects Walrus: af80e665ea49d9003695a665 CVE-2026-863146.2Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote at CVE-2026-863156.2An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScri CVE-2026-863175.3A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor of the file ggml/sr CVE-2026-863185.3A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchD CVE-2026-863195.3A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of t CVE-2026-86327.8A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow CVE-2026-863207.8A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can CVE-2026-863215.3A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this issue is the function JsonLoader.fromURL of the file sr CVE-2026-863228.8A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#find_user resolves the target ac