Vulnerability Details : CVE-2019-16240
A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
Vulnerability category: OverflowInformation leak
Products affected by CVE-2019-16240
- cpe:2.3:o:hp:pagewide_pro_577z_k9z76a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_577z_k9z76b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_577z_k9z76d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_577dw_d3q21a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_577dw_d3q21b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_577dw_d3q21c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_577dw_d3q21d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_552dw_2dr21d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_552dw_d3q17a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_552dw_d3q17d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_552dw_k9z74a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_552dw_k9z74d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_477dw_d3q20a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_477dw_d3q20b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_477dw_d3q20c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_477dw_d3q20d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_477dw_w2z53b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_477dn_d3q19d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_477dn_d3q19b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_477dn_d3q19a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_452dw_w2z52b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_452dw_d3q16d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_452dw_d3q16a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_452dn_d3q15d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_452dn_d3q15b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_pro_452dn_d3q15a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_managed_p52750dw_j9v78b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_managed_p52750dw_j9v82d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_managed_p52750dw_j9v82a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_managed_p57750dw_j9v78b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_managed_p57750dw_j9v82d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_managed_p57750dw_j9v82a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_managed_p55250dw_j6u51b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_managed_p55250dw_j6u55d_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_managed_p55250dw_j6u55a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_377dw_j9v80b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_377dw_j9v80a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_352dw_j6u57b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:pagewide_352dw_j6u57a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:officejet_pro_8210_d9l63a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:officejet_pro_8210_d9l64a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:officejet_pro_8210_j3p65a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:officejet_pro_8210_j3p68a_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:hp:officejet_pro_8210_t0g70a_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-16240
0.28%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 69 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-16240
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:P |
8.6
|
4.9
|
NIST | |
|
9.1
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
3.9
|
5.2
|
NIST |
CWE ids for CVE-2019-16240
-
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-16240
-
https://support.hp.com/us-en/document/c06458150
HPSBPI03630 rev. 2 - HP Inkjet Printers - Buffer Overflow and Local Disclosure of Information | HP® Customer SupportVendor Advisory
Jump to