Read the docs
TI-2019-12222 Aliases CVE-2019-16240GHSA-2w2m-vwp5-22c5

A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers…

Priority MEDIUM 42CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

Why it matters now

EPSS 0.01348 71st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 88

CPEVersionsRoleVendor
cpe:2.3:o:hp:pagewide_pro_577z_k9z76a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_577z_k9z76a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_577z_k9z76b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_577z_k9z76b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_577z_k9z76d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_577z_k9z76d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_577dw_d3q21a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_577dw_d3q21a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_577dw_d3q21b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_577dw_d3q21b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
Show 78 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:hp:pagewide_pro_577dw_d3q21c_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_577dw_d3q21c:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_577dw_d3q21d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_577dw_d3q21d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_552dw_2dr21d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_552dw_2dr21d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_552dw_d3q17a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_552dw_d3q17a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_552dw_d3q17d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_552dw_d3q17d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_552dw_k9z74a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_552dw_k9z74a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_552dw_k9z74d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_552dw_k9z74d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_477dw_d3q20a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_477dw_d3q20a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_477dw_d3q20b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_477dw_d3q20b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_477dw_d3q20c_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_477dw_d3q20c:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_477dw_d3q20d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_477dw_d3q20d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_477dw_w2z53b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_477dw_w2z53b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_477dn_d3q19d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_477dn_d3q19d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_477dn_d3q19b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_477dn_d3q19b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_477dn_d3q19a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_477dn_d3q19a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_452dw_w2z52b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_452dw_w2z52b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_452dw_d3q16d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_452dw_d3q16d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_452dw_d3q16a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_452dw_d3q16a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_452dn_d3q15d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_452dn_d3q15d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_452dn_d3q15b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_452dn_d3q15b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_pro_452dn_d3q15a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_pro_452dn_d3q15a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_managed_p52750dw_j9v78b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_managed_p52750dw_j9v78b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_managed_p52750dw_j9v82d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_managed_p52750dw_j9v82d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_managed_p52750dw_j9v82a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_managed_p52750dw_j9v82a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_managed_p57750dw_j9v78b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_managed_p57750dw_j9v78b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_managed_p57750dw_j9v82d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_managed_p57750dw_j9v82d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_managed_p57750dw_j9v82a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_managed_p57750dw_j9v82a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_managed_p55250dw_j6u51b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_managed_p55250dw_j6u51b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_managed_p55250dw_j6u55d_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_managed_p55250dw_j6u55d:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_managed_p55250dw_j6u55a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_managed_p55250dw_j6u55a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_377dw_j9v80b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_377dw_j9v80b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_377dw_j9v80a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_377dw_j9v80a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_352dw_j6u57b_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_352dw_j6u57b:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:pagewide_352dw_j6u57a_firmware:*:*:*:*:*:*:*:*before 001.1937dVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:pagewide_352dw_j6u57a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:officejet_pro_8210_d9l63a_firmware:*:*:*:*:*:*:*:*before 001.1937cVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_pro_8210_d9l63a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:officejet_pro_8210_d9l64a_firmware:*:*:*:*:*:*:*:*before 001.1937cVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_pro_8210_d9l64a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:officejet_pro_8210_j3p65a_firmware:*:*:*:*:*:*:*:*before 001.1937cVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_pro_8210_j3p65a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:officejet_pro_8210_j3p68a_firmware:*:*:*:*:*:*:*:*before 001.1937cVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_pro_8210_j3p68a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:hp:officejet_pro_8210_t0g70a_firmware:*:*:*:*:*:*:*:*before 001.1937cVulnerableHewlett Packard Enterprise
cpe:2.3:h:hp:officejet_pro_8210_t0g70a:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-16240
  2. 2026-10-03 Alias added: GHSA-2w2m-vwp5-22c5

References

  • TI-2022-08174 Certain HP Print devices may be vulnerable to potential information disclosure, denial of… CVSS 3.1CRITICAL 9.8
  • TI-2022-08173 Certain HP Print devices may be vulnerable to potential information disclosure, denial of… CVSS 3.1CRITICAL 9.8
  • TI-2021-02846 Memory corruption in Hewlett Packard Enterprise HP Print products and Digital Sending… CVSS 3.1CRITICAL 9.8
  • TI-2022-08172 Certain HP Print devices may be vulnerable to potential information disclosure, denial of… CVSS 3.1HIGH 7.5

Sources