First published: Thu Nov 07 2019(Updated: )
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
Credit: hp-security-alert@hp.com
Affected Software | Affected Version | How to fix |
---|---|---|
HP d9l63a | <001.1937c | |
HP d9l63a firmware | ||
HP d9l64a | <001.1937c | |
HP Envy 5642 | ||
HP t0g70a firmware | <001.1937c | |
HP t0g70a firmware | ||
HP j3p65a firmware | <001.1937c | |
HP j3p65a firmware | ||
HP j3p68a | <001.1937c | |
HP j3p68a firmware | ||
HP j6u57a | <001.1937d | |
HP j6u57a firmware | ||
HP PageWide 352dw j6u57b firmware | <001.1937d | |
HP PageWide 352dw j6u57b firmware | ||
HP j9v80a firmware | <001.1937d | |
HP j9v80a firmware | ||
HP j9v80b | <001.1937d | |
HP j9v80b firmware | ||
HP j6u55a | <001.1937d | |
HP j6u55a firmware | ||
HP j6u55d | <001.1937d | |
HP j6u55d firmware | ||
HP j6u51b | <001.1937d | |
HP j6u51b firmware | ||
HP j9v82a | <001.1937d | |
HP j9v82a firmware | ||
HP j9v82d | <001.1937d | |
HP j9v82d firmware | ||
HP j9v78b firmware | <001.1937d | |
HP j9v78b firmware | ||
HP d3q15a firmware | <001.1937d | |
HP d3q15a firmware | ||
HP d3q15b firmware | <001.1937d | |
HP d3q15b firmware | ||
HP d3q15d | <001.1937d | |
HP d3q15d firmware | ||
HP d3q16a firmware | <001.1937d | |
HP d3q16a firmware | ||
HP d3q16d | <001.1937d | |
HP d3q16d firmware | ||
HP w2z52b firmware | <001.1937d | |
HP w2z52b firmware | ||
HP d3q19a | <001.1937d | |
HP d3q19a firmware | ||
HP d3q19b | <001.1937d | |
HP d3q19b firmware | ||
HP d3q19d firmware | <001.1937d | |
HP d3q19d firmware | ||
HP d3q20a firmware | <001.1937d | |
HP d3q20a firmware | ||
HP d3q20b firmware | <001.1937d | |
HP d3q20b firmware | ||
HP PageWide Pro 477dw | <001.1937d | |
HP d3q20c | ||
HP d3q20d | <001.1937d | |
HP d3q20d firmware | ||
HP w2z53b firmware | <001.1937d | |
HP w2z53b firmware | ||
HP 2dr21d | <001.1937d | |
HP 2dr21d firmware | ||
HP d3q17a | <001.1937d | |
HP d3q17a firmware | ||
HP d3q17d firmware | <001.1937d | |
HP d3q17d firmware | ||
HP k9z74a firmware | <001.1937d | |
HP k9z74a firmware | ||
HP k9z74d | <001.1937d | |
HP k9z74d firmware | ||
HP d3q21a | <001.1937d | |
HP d3q21a firmware | ||
HP d3q21b | <001.1937d | |
HP d3q21b firmware | ||
HP PageWide Pro 577dw D3Q21C Firmware | <001.1937d | |
HP d3q21c firmware | ||
HP d3q21a | <001.1937d | |
HP d3q21d firmware | ||
HP k9z76a firmware | <001.1937d | |
HP k9z76a firmware | ||
HP PageWide Pro 577z k9z76b firmware | <001.1937d | |
HP PageWide Pro 577z | ||
HP k9z76d | <001.1937d | |
HP k9z76d firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-6337 has been classified as a high severity vulnerability that can result in a core dump on affected HP Inkjet printers.
To mitigate the risk of CVE-2019-6337, users should update their affected HP Inkjet printers to the latest firmware version beyond 001.1937c.
CVE-2019-6337 affects several HP Inkjet printer models including the d9l63a, d9l64a, t0g70a, and others listed in the vulnerability report.
Failure to address CVE-2019-6337 may allow attackers to create malicious print files that could crash the printer and potentially lead to data leakage.
While the best solution is to update to the latest firmware, temporarily avoiding the use of untrusted print files may help reduce exposure to CVE-2019-6337.