critical
CVE-2026-8631
HPLIP: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (high), AlmaLinux (high), Oracle (high), Rocky Linux (high), Ubuntu (medium).
Description
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alma 8 | hplip, hplip-common, hplip-gui and 2 more | 3.18.4-13.el8_10.alma.1 |
| alma 9 | hplip, hplip-common, hplip-libs and 1 more | 3.21.2-6.el9_8.4.alma.1 |
| debian 11 | hplip | 3.21.2+dfsg1-2+deb11u1 |
| debian 12 | hplip | 3.22.10+dfsg0-2+deb12u1 |
| debian 13 | hplip | 3.22.10+dfsg0-8.1+deb13u1 |
| debian 14 | hplip | 3.26.4+dfsg0-1 |
| echo | hplip | 3.22.10+dfsg0-2+deb12u1 |
| Oracle Linux 8 | hplip, hplip-common, hplip-gui and 2 more | 3.18.4-13.el8_10 |
| Oracle Linux 9 | hplip, hplip-common, hplip-libs and 1 more | 3.21.2-6.el9_8.4 |
| rapidfort alma 9 | hplip, hplip-common, hplip-libs and 1 more | 0:3.21.2-6.el9_2.1, 3.21.2-6.el9_8.4.alma.1 and 1 more |
| rapidfort debian 12 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
| rapidfort debian 13 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
Show all 72 entries from 27 sources
| Source | Package | Fixed in |
|---|---|---|
| alma 8 | hplip | 3.18.4-13.el8_10.alma.1 |
| alma 8 | hplip-common | 3.18.4-13.el8_10.alma.1 |
| alma 8 | hplip-gui | 3.18.4-13.el8_10.alma.1 |
| alma 8 | hplip-libs | 3.18.4-13.el8_10.alma.1 |
| alma 8 | libsane-hpaio | 3.18.4-13.el8_10.alma.1 |
| alma 9 | hplip | 3.21.2-6.el9_8.4.alma.1 |
| alma 9 | hplip-common | 3.21.2-6.el9_8.4.alma.1 |
| alma 9 | hplip-libs | 3.21.2-6.el9_8.4.alma.1 |
| alma 9 | libsane-hpaio | 3.21.2-6.el9_8.4.alma.1 |
| debian 11 | hplip | 3.21.2+dfsg1-2+deb11u1 |
| debian 12 | hplip | 3.22.10+dfsg0-2+deb12u1 |
| debian 13 | hplip | 3.22.10+dfsg0-8.1+deb13u1 |
| debian 14 | hplip | 3.26.4+dfsg0-1 |
| echo | hplip | 3.22.10+dfsg0-2+deb12u1 |
| Oracle Linux 8 | hplip | 3.18.4-13.el8_10 |
| Oracle Linux 8 | hplip-common | 3.18.4-13.el8_10 |
| Oracle Linux 8 | hplip-gui | 3.18.4-13.el8_10 |
| Oracle Linux 8 | hplip-libs | 3.18.4-13.el8_10 |
| Oracle Linux 8 | libsane-hpaio | 3.18.4-13.el8_10 |
| Oracle Linux 9 | hplip | 3.21.2-6.el9_8.4 |
| Oracle Linux 9 | hplip-common | 3.21.2-6.el9_8.4 |
| Oracle Linux 9 | hplip-libs | 3.21.2-6.el9_8.4 |
| Oracle Linux 9 | libsane-hpaio | 3.21.2-6.el9_8.4 |
| rapidfort alma 9 | hplip | 0:3.21.2-6.el9_2.1, 3.21.2-6.el9_8.4.alma.1 |
| rapidfort alma 9 | hplip-common | 3.21.2-6.el9_8.4.alma.1 |
| rapidfort alma 9 | hplip-libs | 3.21.2-6.el9_8.4.alma.1 |
| rapidfort alma 9 | libsane-hpaio | 3.21.2-6.el9_8.4.alma.1 |
| rapidfort debian 12 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
| rapidfort debian 13 | hplip | 0:3.22.10+dfsg0-2+deb12u1 |
| rapidfort fedora 43 | hplip | 3.26.4-2.fc43 |
| rapidfort fedora 43 | hplip-common | 3.26.4-2.fc43 |
| rapidfort fedora 43 | hplip-gui | 3.26.4-2.fc43 |
| rapidfort fedora 43 | hplip-libs | 3.26.4-2.fc43 |
| rapidfort fedora 43 | libsane-hpaio | 3.26.4-2.fc43 |
| rapidfort Oracle Linux 10 | hplip | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 10 | hplip-common | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 10 | hplip-libs | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 10 | libsane-hpaio | 0:3.23.12-10.el10_2.5 |
| rapidfort Oracle Linux 9 | hplip | 0:3.21.2-6.el9_8.4 |
| rapidfort Oracle Linux 9 | hplip-common | 0:3.21.2-6.el9_8.4 |
| rapidfort Oracle Linux 9 | hplip-libs | 0:3.21.2-6.el9_8.4 |
| rapidfort Oracle Linux 9 | libsane-hpaio | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | hplip | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | hplip-common | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | hplip-libs | 0:3.21.2-6.el9_8.4 |
| rapidfort rocky 9 | libsane-hpaio | 0:3.21.2-6.el9_8.4 |
| rapidfort ubuntu 20.04 | hplip | 0:3.21.12+dfsg0-1ubuntu0.1, 0:3.23.12+dfsg0-0ubuntu5.1 |
| rapidfort ubuntu 22.04 | hplip | 0:3.21.12+dfsg0-1ubuntu0.1, 0:3.23.12+dfsg0-0ubuntu5.1 |
| rapidfort ubuntu 24.04 | hplip | 0:3.21.12+dfsg0-1ubuntu0.1, 0:3.23.12+dfsg0-0ubuntu5.1 |
| Red Hat | hpijs | no fix listed |
| Red Hat | hplip | no fix listed |
| Red Hat | hplip-common | no fix listed |
| Red Hat | hplip-gui | no fix listed |
| Red Hat | hplip-libs | no fix listed |
| Red Hat | libsane-hpaio | no fix listed |
| rocky 10 | hplip | 3.23.12-10.el10_2.4 |
| rocky 10 | hplip-common | 3.23.12-10.el10_2.4 |
| rocky 10 | hplip-libs | 3.23.12-10.el10_2.4 |
| rocky 10 | libsane-hpaio | 3.23.12-10.el10_2.4 |
| rocky 8 | hplip | 3.18.4-13.el8_10 |
| rocky 8 | hplip-common | 3.18.4-13.el8_10 |
| rocky 8 | hplip-gui | 3.18.4-13.el8_10 |
| rocky 8 | hplip-libs | 3.18.4-13.el8_10 |
| rocky 8 | libsane-hpaio | 3.18.4-13.el8_10 |
| rocky 9 | hplip | 3.21.2-6.el9_8.4 |
| rocky 9 | hplip-common | 3.21.2-6.el9_8.4 |
| rocky 9 | hplip-libs | 3.21.2-6.el9_8.4 |
| rocky 9 | libsane-hpaio | 3.21.2-6.el9_8.4 |
| ubuntu 22.04 | hplip | 3.21.12+dfsg0-1ubuntu0.1 |
| ubuntu 24.04 | hplip | 3.23.12+dfsg0-0ubuntu5.1 |
| ubuntu 25.10 | hplip | 3.24.4+dfsg0-0ubuntu5.2 |
| ubuntu 26.04 | hplip | 3.24.4+dfsg0-0ubuntu8.1 |
References
- https://access.redhat.com/errata/RHSA-2026:26228
- https://access.redhat.com/errata/RHSA-2026:26297
- https://access.redhat.com/errata/RHSA-2026:26335
- https://access.redhat.com/errata/RHSA-2026:48171
- https://access.redhat.com/errata/RHSA-2026:48586
- https://access.redhat.com/errata/RHSA-2026:48603
- https://access.redhat.com/errata/RHSA-2026:48606
- https://access.redhat.com/errata/RHSA-2026:48959
All 27 references
- https://access.redhat.com/errata/RHSA-2026:48960
- https://access.redhat.com/errata/RHSA-2026:48961
- https://access.redhat.com/security/cve/CVE-2026-8631
- https://bugzilla.redhat.com/2480297
- https://bugzilla.redhat.com/2480300
- https://bugzilla.redhat.com/show_bug.cgi?id=2480297
- https://bugzilla.redhat.com/show_bug.cgi?id=2480300
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8631
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8632
- https://errata.almalinux.org/9/ALSA-2026-26297.html
- https://errata.rockylinux.org/RLSA-2026:26297
- https://linux.oracle.com/cve/CVE-2026-8631.html
- https://linux.oracle.com/errata/ELSA-2026-26335.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-8631
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8631.json
- https://support.hp.com/us-en/document/ish_14942099-14942126-16/hpsbpi04118
- https://ubuntu.com/security/notices/USN-8483-1
- https://www.cve.org/CVERecord?id=CVE-2026-8631