CVE-2026-14544: Hplip: incomplete fix for cve-2026-8631
A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.
Other sources
Incomplete Fix for CVE-2026-8631.
During development of the fix for CVE-2026-8631 an issue was introduced in hpcups, which made the fix for CVE-2026-8631 incomplete. The original fix was protecting result of multiplication of several variables, which are influenced by crafted input file, from integer overflow. The core of the new flaw is that it protects multiplication of one different pair of variables, leaving the one variable which can be influenced by input file unchecked, which can result in arbitrary cod
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14544?
The severity of CVE-2026-14544 is critical, with a CVSS score of 9.8.
How do I fix CVE-2026-14544?
To fix CVE-2026-14544, update to the latest version of HP HPLIP that addresses this vulnerability.
What type of vulnerability is CVE-2026-14544?
CVE-2026-14544 is identified as an integer overflow vulnerability.
Can CVE-2026-14544 lead to remote code execution?
Yes, CVE-2026-14544 may allow remote attackers to achieve arbitrary code execution.
What software is affected by CVE-2026-14544?
CVE-2026-14544 affects HP Linux Imaging and Printing Software (HPLIP).