Read the docs
TI-2019-04502 Aliases CVE-2019-6337GHSA-hfx8-5p8q-39w9

For the printers listed a maliciously crafted print file might cause certain HP Inkjet…

Priority LOW 24Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

Why it matters now

EPSS 0.00416 36th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—HP OfficeJet Pro 8210 Printer series,HP PageWide 352dw Printer,HP PageWide 377dw Multifunction Printer,HP PageWide Managed P55250dw Printer series,HP PageWide Managed P57750dw Multifunction Printer series,HP PageWide Managed P52750dw Multifunction Printer,HP PageWide Pro 452dn Printer series,HP PageWide Pro 452dw Printer series,HP PageWide Pro 477dn Multifunction Printer series,HP PageWide Pro 477dw Multifunction Printer series,HP PageWide Pro 552dw Printer series,HP PageWide Pro 577dw Multifunction Printer series001.1937C or later For all models—No fix listedCNA
  • HP OfficeJet Pro 8210 Printer series,HP PageWide 352dw Printer,HP PageWide 377dw Multifunction Printer,HP PageWide Managed P55250dw Printer series,HP PageWide Managed P57750dw Multifunction Printer series,HP PageWide Managed P52750dw Multifunction Printer,HP PageWide Pro 452dn Printer series,HP PageWide Pro 452dw Printer series,HP PageWide Pro 477dn Multifunction Printer series,HP PageWide Pro 477dw Multifunction Printer series,HP PageWide Pro 552dw Printer series,HP PageWide Pro 577dw Multifunction Printer series Vendor— Affected 001.1937C or later For all models Fixed in — No fix listed CNA

CPE configurations NVD · 82

CPEVersionsRoleVendor
cpe:2.3:o:hp:d9l63a_firmware:*:*:*:*:*:*:*:*before 001.1937cVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d9l63a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d9l64a_firmware:*:*:*:*:*:*:*:*before 001.1937cVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d9l64a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:t0g70a_firmware:*:*:*:*:*:*:*:*before 001.1937cVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:t0g70a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j3p65a_firmware:*:*:*:*:*:*:*:*before 001.1937cVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j3p65a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j3p68a_firmware:*:*:*:*:*:*:*:*before 001.1937cVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j3p68a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
Show 72 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hp:j6u57a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6u57a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6u57b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6u57b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j9v80a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j9v80a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j9v80b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j9v80b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6u55a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6u55a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6u55d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6u55d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j6u51b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j6u51b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j9v82a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j9v82a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j9v82d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j9v82d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:j9v78b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:j9v78b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q15a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q15a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q15b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q15b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q15d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q15d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q16a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q16a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q16d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q16d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:w2z52b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:w2z52b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q19a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q19a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q19b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q19b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q19d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q19d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q20a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q20a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q20b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q20b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q20c_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q20c:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q20d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q20d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:w2z53b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:w2z53b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:2dr21d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:2dr21d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q17a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q17a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q17d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q17d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k9z74a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k9z74a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k9z74d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k9z74d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q21a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q21a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q21b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q21b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q21c_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q21c:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:d3q21d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:d3q21d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k9z76a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k9z76a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k9z76b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k9z76b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:k9z76d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:k9z76d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-6337
  2. 2026-10-03 Alias added: GHSA-hfx8-5p8q-39w9

References

  • TI-2019-07924 Memory corruption in Qualcomm PostScript and PDF printers that use IPS versions prior to… CVSS 3.1CRITICAL 9.8

Sources