CVE-2019-16240: Buffer Overflow

Published Nov 9, 2021
·
Updated

A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

Affected Software

88 affected components
HP Pagewide Pro 577z K9z76a Firmware<001.1937d
HP Pagewide Pro 577z K9z76a
HP Pagewide Pro 577z K9z76b Firmware<001.1937d
HP Pagewide Pro 577z K9z76b
HP Pagewide Pro 577z K9z76d Firmware<001.1937d
HP Pagewide Pro 577z K9z76d
HP Pagewide Pro 577dw D3q21a Firmware<001.1937d
HP Pagewide Pro 577dw D3q21a
HP Pagewide Pro 577dw D3q21b Firmware<001.1937d
HP Pagewide Pro 577dw D3q21b
HP Pagewide Pro 577dw D3q21c Firmware<001.1937d
HP Pagewide Pro 577dw D3q21c
HP Pagewide Pro 577dw D3q21d Firmware<001.1937d
HP Pagewide Pro 577dw D3q21d
HP Pagewide Pro 552dw 2dr21d Firmware<001.1937d
HP Pagewide Pro 552dw 2dr21d
HP Pagewide Pro 552dw D3q17a Firmware<001.1937d
HP Pagewide Pro 552dw D3q17a
HP Pagewide Pro 552dw D3q17d Firmware<001.1937d
HP Pagewide Pro 552dw D3q17d
HP Pagewide Pro 552dw K9z74a Firmware<001.1937d
HP Pagewide Pro 552dw K9z74a
HP Pagewide Pro 552dw K9z74d Firmware<001.1937d
HP Pagewide Pro 552dw K9z74d
HP Pagewide Pro 477dw D3q20a Firmware<001.1937d
HP Pagewide Pro 477dw D3q20a
HP Pagewide Pro 477dw D3q20b Firmware<001.1937d
HP Pagewide Pro 477dw D3q20b
HP Pagewide Pro 477dw D3q20c Firmware<001.1937d
HP Pagewide Pro 477dw D3q20c
HP Pagewide Pro 477dw D3q20d Firmware<001.1937d
HP Pagewide Pro 477dw D3q20d
HP Pagewide Pro 477dw W2z53b Firmware<001.1937d
HP Pagewide Pro 477dw W2z53b
HP Pagewide Pro 477dn D3q19d Firmware<001.1937d
HP Pagewide Pro 477dn D3q19d
HP Pagewide Pro 477dn D3q19b Firmware<001.1937d
HP Pagewide Pro 477dn D3q19b
HP Pagewide Pro 477dn D3q19a Firmware<001.1937d
HP Pagewide Pro 477dn D3q19a
HP Pagewide Pro 452dw W2z52b Firmware<001.1937d
HP Pagewide Pro 452dw W2z52b
HP Pagewide Pro 452dw D3q16d Firmware<001.1937d
HP Pagewide Pro 452dw D3q16d
HP Pagewide Pro 452dw D3q16a Firmware<001.1937d
HP Pagewide Pro 452dw D3q16a
HP Pagewide Pro 452dn D3q15d Firmware<001.1937d
HP Pagewide Pro 452dn D3q15d
HP Pagewide Pro 452dn D3q15b Firmware<001.1937d
HP Pagewide Pro 452dn D3q15b
HP Pagewide Pro 452dn D3q15a Firmware<001.1937d
HP Pagewide Pro 452dn D3q15a
HP Pagewide Managed P52750dw J9v78b Firmware<001.1937d
HP Pagewide Managed P52750dw J9v78b
HP Pagewide Managed P52750dw J9v82d Firmware<001.1937d
HP Pagewide Managed P52750dw J9v82d
HP Pagewide Managed P52750dw J9v82a Firmware<001.1937d
HP Pagewide Managed P52750dw J9v82a
HP Pagewide Managed P57750dw J9v78b Firmware<001.1937d
HP Pagewide Managed P57750dw J9v78b
HP Pagewide Managed P57750dw J9v82d Firmware<001.1937d
HP Pagewide Managed P57750dw J9v82d
HP Pagewide Managed P57750dw J9v82a Firmware<001.1937d
HP Pagewide Managed P57750dw J9v82a
HP Pagewide Managed P55250dw J6u51b Firmware<001.1937d
HP Pagewide Managed P55250dw J6u51b
HP Pagewide Managed P55250dw J6u55d Firmware<001.1937d
HP Pagewide Managed P55250dw J6u55d
HP Pagewide Managed P55250dw J6u55a Firmware<001.1937d
HP Pagewide Managed P55250dw J6u55a
HP Pagewide 377dw J9v80b Firmware<001.1937d
HP Pagewide 377dw J9v80b
HP Pagewide 377dw J9v80a Firmware<001.1937d
HP Pagewide 377dw J9v80a
HP Pagewide 352dw J6u57b Firmware<001.1937d
HP Pagewide 352dw J6u57b
HP Pagewide 352dw J6u57a Firmware<001.1937d
HP Pagewide 352dw J6u57a
HP Officejet Pro 8210 D9l63a Firmware<001.1937c
HP Officejet Pro 8210 D9l63a
HP Officejet Pro 8210 D9l64a Firmware<001.1937c
HP Officejet Pro 8210 D9l64a
HP Officejet Pro 8210 J3p65a Firmware<001.1937c
HP Officejet Pro 8210 J3p65a
HP Officejet Pro 8210 J3p68a Firmware<001.1937c
HP Officejet Pro 8210 J3p68a
HP Officejet Pro 8210 T0g70a Firmware<001.1937c
HP Officejet Pro 8210 T0g70a

Event History

Nov 9, 2021
CVE Published
via MITRE·02:37 PM
Data Sourced
via MITRE·02:37 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2019-16240?

CVE-2019-16240 is classified as a critical severity vulnerability due to its potential impact on affected HP printers.

2

How do I fix CVE-2019-16240?

To remediate CVE-2019-16240, update the firmware of affected HP OfficeJet Pro and PageWide printers to version 001.1937C or later.

3

Which HP printers are affected by CVE-2019-16240?

CVE-2019-16240 affects various models of HP OfficeJet Pro and PageWide printers that are running firmware prior to version 001.1937C or D.

4

What vulnerabilities does CVE-2019-16240 exploit?

CVE-2019-16240 exploits buffer overflow and information disclosure vulnerabilities that occur when processing a maliciously crafted print file.

5

Is a workaround available for CVE-2019-16240?

Currently, applying the firmware update is the recommended and only effective means to mitigate the risks associated with CVE-2019-16240.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203