Log in Start free

Vulnerability · Published Jul 3, 2026 · Assigned by redhat

CVE-2026-14544Hplip: incomplete fix for cve-2026-8631

Critical 9.8

In plain English

A critical-severity integer overflow in HPLIP from HP. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.2%top 31.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10hplip3.23.12-10.el10_2.5ALSA-2026:39976
AlmaLinux:8hplip3.18.4-14.el8_10.alma.1ALSA-2026:40894
AlmaLinux:9hplip3.21.2-6.el9_8.5.alma.1ALSA-2026:40831
AlmaLinux:10hplip-common3.23.12-10.el10_2.5ALSA-2026:39976
AlmaLinux:8hplip-common3.18.4-14.el8_10.alma.1ALSA-2026:40894
AlmaLinux:9hplip-common3.21.2-6.el9_8.5.alma.1ALSA-2026:40831
AlmaLinux:8hplip-gui3.18.4-14.el8_10.alma.1ALSA-2026:40894
AlmaLinux:10hplip-libs3.23.12-10.el10_2.5ALSA-2026:39976
AlmaLinux:8hplip-libs3.18.4-14.el8_10.alma.1ALSA-2026:40894
AlmaLinux:9hplip-libs3.21.2-6.el9_8.5.alma.1ALSA-2026:40831
AlmaLinux:10libsane-hpaio3.23.12-10.el10_2.5ALSA-2026:39976
AlmaLinux:8libsane-hpaio3.18.4-14.el8_10.alma.1ALSA-2026:40894
AlmaLinux:9libsane-hpaio3.21.2-6.el9_8.5.alma.1ALSA-2026:40831
Debian:12hplipno fix listedDEBIAN-CVE-2026-14544
Debian:13hplipno fix listedDEBIAN-CVE-2026-14544
Debian:14hplipno fix listedDEBIAN-CVE-2026-14544
Rocky Linux:10hplip0:3.23.12-10.el10_2.5RLSA-2026:39976
Rocky Linux:8hplip0:3.18.4-14.el8_10RLSA-2026:40894
Rocky Linux:9hplip0:3.21.2-6.el9_8.5RLSA-2026:40831
Ubuntu:25.10hplipno fix listedUBUNTU-CVE-2026-14544

Affected products (as reported)

VendorProductVersions
HP HPLIP 0
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References